asp 实现对SQL注入危险字符开展重编码处理的函数
发布时间：2023-09-20 15:55:22 所属栏目：Asp教程 来源：
导读： <%
'******************************
'函数：CheckStr(byVal ChkStr)
'参数：ChkStr,待验证的字符
'作者：阿里西西
'日期：2007/7/15

'******************************
'函数：CheckStr(byVal ChkStr)
'参数：ChkStr,待验证的字符
'作者：阿里西西
'日期：2007/7/15

|
<% '****************************** '函数：CheckStr(byVal ChkStr) '参数：ChkStr,待验证的字符 '作者：阿里西西 '日期：2007/7/15 '描述：对SQL注入危险字符进行重编码处理 '示例：CheckStr("and 1=1 or select * from") '****************************** Function CheckStr(byVal ChkStr) Dim Str:Str=ChkStr Str=Trim(Str) If IsNull(Str) Then CheckStr = "" Exit Function End If Dim re Set re=new RegExp re.IgnoreCase =True re.Global=True re.Pattern="(/r/n){3,}" Str=re.Replace(Str,"$1$1$1") Set re=Nothing Str = Replace(Str,"'","''") Str = Replace(Str, "select", "select") Str = Replace(Str, "join", "join") Str = Replace(Str, "union", "union") Str = Replace(Str, "where", "where") Str = Replace(Str, "insert", "insert") Str = Replace(Str, "delete", "delete") Str = Replace(Str, "update", "update") Str = Replace(Str, "like", "like") Str = Replace(Str, "drop", "drop") Str = Replace(Str, "create", "create") Str = Replace(Str, "modify", "modify") Str = Replace(Str, "rename", "rename") Str = Replace(Str, "alter", "alter") Str = Replace(Str, "cast", "cast") CheckStr=Str End Function '反编上面函数处理过的字符串 Function UnCheckStr(Str) Str = Replace(Str, "select", "select") Str = Replace(Str, "join", "join") Str = Replace(Str, "union", "union") Str = Replace(Str, "where", "where") Str = Replace(Str, "insert", "insert") Str = Replace(Str, "delete", "delete") Str = Replace(Str, "update", "update") Str = Replace(Str, "like", "like") Str = Replace(Str, "drop", "drop") Str = Replace(Str, "create", "create") Str = Replace(Str, "modify", "modify") Str = Replace(Str, "rename", "rename") Str = Replace(Str, "alter", "alter") Str = Replace(Str, "cast", "cast") （编辑：聊城站长网） 【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容! |
推荐文章
站长推荐
