| 以下是引用片段： dim qs,errc,iii qs=request.servervariables("query_string") 'response.write(qs) dim deStr(18) deStr(0)="net user" deStr(1)="xp_cmdshell" deStr(2)="/add" deStr(3)="exec%20master.dbo.xp_cmdshell" deStr(4)="net localgroup administrators" deStr(5)="select" deStr(6)="count" deStr(7)="asc" deStr(8)="char" deStr(9)="mid" deStr(10)="'" deStr(11)=":" deStr(12)="""" deStr(13)="insert" deStr(14)="delete" deStr(15)="drop" deStr(16)="truncate" deStr(17)="from" deStr(18)="%" errc=false for iii= 0 to ubound(deStr) if instr(qs,deStr(iii))<>0 then errc=true end if next if errc then Response.Write("对不起，非法URL地址请求!") response.end end if |
