获取参数值与sql安全过滤参数函数代码,ASP代码库,德仔网

代码语言
代码分类
【ASP】获取参数值与sql安全过滤参数函数
作者:Dezai.CN / 发布于2012/10/24/ 1025
获取参数值与sql安全过滤参数函数
<div><span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">'获取参数值</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">Function getForm(element,ftype)</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">Select case ftype</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case "get"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">getForm=trim(request.QueryString(element))</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case "post"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">getForm=trim(request.Form(element))</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case "both"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">if isNul(request.QueryString(element)) then getForm=trim(request.Form(element)) else getForm=trim(request.QueryString(element))</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">End Select</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">getForm=replace(getForm,CHR(34),""")</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">getForm=replace(getForm,CHR(39),"'")</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">End Function</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">'主要功能就是获取参数值，比直接用request("element")要安全很多</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">'过滤参数</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">Function filterPara(byVal Para)</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">filterPara=preventSqlin(Checkxss(Para))</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">End Function</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">Function preventSqlin(content)</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">dim sqlStr,sqlArray,i,speStr</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">sqlStr="<|>|%|%27|'|''|;|*|and|exec|dbcc|alter|drop|insert|select|update|delete|count|master|truncate|char|declare|where|set|declare|mid|chr"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">if isNul(content) then Exit Function</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">sqlArray=split(sqlStr,"|")</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">for i=lbound(sqlArray) to ubound(sqlArray)</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">if instr(lcase(content),sqlArray(i))<>0 then</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">select case sqlArray(i)</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case "<":speStr="<"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case ">":speStr=">"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case "'","""":speStr="""</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">'case ";":speStr="；"</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">case else:speStr=""</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">end select</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">content=replace(content,sqlArray(i),speStr,1,-1,1)</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">end if</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">next</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">preventSqlin=content</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">End Function</span><br style="padding: 0px; margin: 0px; color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px;">
<span style="color: rgb(51, 51, 51); font-family: Arial, Tahoma, Verdana, sans-serif; font-size: 14px; line-height: 25px; background-color: rgb(221, 237, 251);">'上面的参数过滤函主要是防止sql注入，加强的防护。</span></div>
试试其它关键字
　sql安全过滤　
同语言下
可能有用的
Dezai.CN贡献的其它代码(4037)