Jsp/Servlet

开发平台：

Java

SQLAdmin.asp：源码内容

							<%
dim GuGetFlag
dim GuErrorSQLG,GuErrorSQLF
dim RequestKey
dim iGuG,iGuF
GuErrorSQLG=""
GuErrorSQLF=""
GuErrorSQLG=split(GuErrorSQLG,"|")
GuErrorSQLF=split(GuErrorSQLF,"|")
if Request.ServerVariables("REQUEST_METHOD")="GET" then
	GuGetFlag=True
else
	GuGetFlag=False
end if
if GuGetFlag then
	For Each RequestKey In Request.QueryString
	For iGuG=0 To Ubound(GuErrorSQLG)
	if Instr(LCase(Request.QueryString(RequestKey)),GuErrorSQLG(iGuG))<>0 then
		Response.write "<Script Language=""JavaScript"">alert(""防SQL注入检测程序 "&GuErrorSQLG(iGuG)&""");location.href=""Admin_Server.asp"";</Script>"
		Response.end
	end if
	Next
	Next
else
	For Each RequestKey In Request.Form
	For iGuF=0 To Ubound(GuErrorSQLF)
	if Instr(LCase(Request.Form(RequestKey)),GuErrorSQLF(iGuF))<>0 then
		Response.write "<Script Language=""JavaScript"">alert(""防SQL注入检测程序 "&GuErrorSQLF(iGuF)&""");location.href=""Admin_Server.asp"";</Script>"
		Response.end
	end if
	Next
	Next
end if
%>

						