培训静电的意义:简单 数据库问题!!

来源:百度文库 编辑:查人人中国名人网 时间:2024/04/29 14:58:42
后台怎么限制 'or'='or' 登陆?
不是在登陆页面限制 字符 是彻底过滤

可以专门做一个函数过滤页面.把得到的字符串进行替换.
<%
Function Infuse(fString)
fString = replace(fString,"select","")
fString = replace(fString,"and","")
fString = replace(fString,"or","")
fString = replace(fString,"order","")
fString = replace(fString,"by","")
fString = replace(fString,"delect","")
fString = replace(fString,"between","")
fString = replace(fString,"where","")
fString = replace(fString,"update","")
fString = replace(fString,"insert","")
fString = replace(fString,"into","")
fString = replace(fString,"create","")
fString = replace(fString,"table","")
fString = replace(fString,"'","")
fString = replace(fString,"","")
fString = replace(fString,",","")
fString = replace(fString," ","")
Infuse = fString
End Function
%>

可以专门做一个函数过滤页面.把得到的字符串进行替换.
<%
Function Infuse(fString)
fString = replace(fString,"select","")
fString = replace(fString,"and","")
fString = replace(fString,"or","")
fString = replace(fString,"order","")
fString = replace(fString,"by","")
fString = replace(fString,"delect","")
fString = replace(fString,"between","")
fString = replace(fString,"where","")
fString = replace(fString,"update","")
fString = replace(fString,"insert","")
fString = replace(fString,"into","")
fString = replace(fString,"create","")
fString = replace(fString,"table","")
fString = replace(fString,"'","")
fString = replace(fString,"","")
fString = replace(fString,",","")
fString = replace(fString," ","")
Infuse = fString
End Function
%>

还可以用正则法,不过上面的方法已经很好了