ASP过滤SQL中的非法字符并格式化相关的html代码 -- [ASP]─ 深山工作室提供网络投票系统|微信公众号投票|微信公众号小程序|抖音小程序|百度小程序|微信公众号开发|企业网站建设

ASP过滤SQL中的非法字符并格式化相关的html代码

天极网 2008/3/15 20:34:15 深山行者字体:大中小浏览 8053

以下是引用片段：

<%
function changechr(str)
changechr=replace(replace(replace(replace(str,"<","<"),">",">"),chr(13)," ")," "," ")
changechr=replace(replace(replace(replace(changechr,"[sayyes]","<div align=center><img src="),"[b]",""),"[red]",""),"[big]","")
changechr=replace(replace(replace(replace(changechr,"[/sayyes]","></img></div>"),"[/b]",""),"[/red]",""),"[/big]","")
end function

'过滤SQL非法字符并格式化html代码
function Replace_Text(fString)
if isnull(fString) then
Replace_Text=""
exit function
else
fString=trim(fString)
fString=replace(fString,"'","''")
fString=replace(fString,";","；")
fString=replace(fString,"--","—")
fString=server.htmlencode(fString)
Replace_Text=fString
end if
end function

'会员发布的各种信息过滤
'Function Replace_Text(fString)
'If Not IsNull(fString) Then
'fString = trim(fString)
'fString = replace(fString, ";", "；") '分号过滤
'fString = replace(fString, "--", "——") '--过滤
'fString = replace(fString, "%20", "") '特殊字符过滤
'fString = replace(fString, "==", "") '==过滤
'fString = replace(fString, ">", ">")
'fString = replace(fString, "<", "<")
'fString = Replace(fString, CHR(32), " ") ' 
'fString = Replace(fString, CHR(9), " ") ' 
'fString = Replace(fString, CHR(34), """)
'fString = Replace(fString, CHR(39), "'") '单引号过滤
'fString = Replace(fString, CHR(13), "")
'fString = Replace(fString, CHR(10) & CHR(10), " ")
'fString = Replace(fString, CHR(10), " ")
'Replace_Text = fString
'End If
'End Function

'过滤SQL非法字符
Function checkStr(Chkstr)
dim Str:Str=Chkstr
if isnull(Str) then
   checkStr = ""
   exit Function
else
   Str=replace(Str,"'","")
   Str=replace(Str,";","")
   Str=replace(Str,"--","")
   checkStr=Str
end if
End Function

'检测传递的参数是否为数字型
Function Chkrequest(Para)
Chkrequest=False
If Not (IsNull(Para) Or Trim(Para)="" Or Not IsNumeric(Para)) Then
Chkrequest=True
End If
End Function

'检测传递的参数是否为日期型
Function Chkrequestdate(Para)
Chkrequestdate=False
If Not (IsNull(Para) Or Trim(Para)="" Or Not IsDate(Para)) Then
Chkrequestdate=True
End If
End Function

'得到当前页面的地址
Function GetUrl()
On Error Resume Next
Dim strTemp
If LCase(Request.ServerVariables("HTTPS")) = "off" Then
strTemp = "http://"
Else
strTemp = "https://"
End If
strTemp = strTemp & CheckStr(Request.ServerVariables("SERVER_NAME"))
If Request.ServerVariables("SERVER_PORT") <> 80 Then strTemp = strTemp & ":" & CheckStr(Request.ServerVariables("SERVER_PORT"))
strTemp = strTemp & CheckStr(Request.ServerVariables("URL"))
If Trim(Request.QueryString) <> "" Then strTemp = strTemp & "?" & CheckStr(Trim(Request.QueryString))
GetUrl = strTemp
End Function

'Function CheckReferer()   '检查用户是否在浏览器里输入了本页的地址
'     Dim sReferer, Icheck
'     CheckReferer = True
'     sReferer = Request.ServerVariables("HTTP_REFERER")
'     ServerIP = Request.ServerVariables("LOCAL_ADDR")
'     Icheck = InStr(sReferer, "ServerIP")
'     If Icheck = 0 Then
'     CheckReferer = False
'     End If
'End Function

'日期格式化
Function FormatDate(DT,tp)
dim Y,M,D
Y=Year(DT)
M=month(DT)
D=Day(DT)
if M<10 then M="0"&M
if D<10 then D="0"&D
select case tp
case 1 FormatDate=Y&"年"&M&"月"&D&"日"
case 2 FormatDate=Y&"-"&M&"-"&D
end select
End Function

'不允许外部提交数据的选择
Function ChkPost()
 dim HTTP_REFERER,SERVER_NAME
dim server_v1,server_v2
chkpost=false
 SERVER_NAME=CheckStr(Request.ServerVariables("SERVER_NAME"))
HTTP_REFERER=CheckStr(Request.ServerVariables("HTTP_REFERER"))
server_v1=Cstr(HTTP_REFERER)
server_v2=Cstr(SERVER_NAME)
if mid(server_v1,8,len(server_v2))<>server_v2 then
 chkpost=false
else
 chkpost=true
end if
End Function

'构造上传图片文件名随机数
function MakedownName()
dim fname
fname = now()
fname = replace(fname,"-","")
fname = replace(fname," ","")
fname = replace(fname,":","")
fname = replace(fname,"PM","")
fname = replace(fname,"AM","")
fname = replace(fname,"上午","")
fname = replace(fname,"下午","")
fname = int(fname) + int((10-1+1)*Rnd + 1)
MakedownName=fname
end function

'Email检测
function IsValidEmail(email)
dim names, name, i, c
IsValidEmail = true
names = Split(email, "@")
if UBound(names) <> 1 then
 IsValidEmail = false
 exit function
end if
for each name in names
 if Len(name) <= 0 then
 IsValidEmail = false
 exit function
 end if
 for i = 1 to Len(name)
 c = Lcase(Mid(name, i, 1))
 if InStr("abcdefghijklmnopqrstuvwxyz_-.", c) <= 0 and not IsNumeric(c) then
 IsValidEmail = false
 exit function
 end if
 next
 if Left(name, 1) = "." or Right(name, 1) = "." then
 IsValidEmail = false
 exit function
 end if
next
if InStr(names(1), ".") <= 0 then
 IsValidEmail = false
 exit function
end if
i = Len(names(1)) - InStrRev(names(1), ".")
if i <> 2 and i <> 3 then
 IsValidEmail = false
 exit function
end if
if InStr(email, "..") > 0 then
 IsValidEmail = false
end if
end function

'Jmail邮件发送
Function SendJmail(Email,Topic,MailBody)

Dim JMail
on error resume next
Set JMail = Server.CreateObject("JMail.SMTPMail")
JMail.LazySend             = true
JMail.silent             = true
JMail.Charset             = "gb2312"
JMail.ContentType       = "text/html"
JMail.Sender             = "wemaster@alibaba.info" '我们网站自己的邮箱
JMail.ReplyTo             = "wemaster@alibaba.info" '我们网站自己的邮箱
JMail.SenderName       = "阿里爸爸邮件发送"
JMail.Subject             = Topic
JMail.SimpleLayout       = true
JMail.Body             = MailBody
JMail.Priority             = 3
JMail.AddRecipient Email
JMail.AddHeader "Originating-IP", GBL_IPAddress
If JMail.Execute() = false Then
   SendJmail = 0
Else
   SendJmail = 1
End If
JMail.Close
Set JMail = Nothing

End Function

'分页
Function listPages(LinkFile)
if not (rs.eof and rs.bof) then
gopage=currentpage
totalpage=n
blockPage=Int((gopage-1)/10)*10+1
' if instr(linkfile,"?page=")>0 or instr(linkfile,"&page=")>0 then
' pos=instr(linkfile,"page=")-2
' linkfile=left(linkfile,pos)
' end if

If LCase(Request.ServerVariables("HTTPS")) = "off" Then
 strTemp = "http://"
 Else
 strTemp = "https://"
 End If
 strTemp = strTemp & CheckStr(Request.ServerVariables("SERVER_NAME"))
 If Request.ServerVariables("SERVER_PORT") <> 80 Then strTemp = strTemp & ":" & CheckStr(Request.ServerVariables("SERVER_PORT"))
 strTemp = strTemp & CheckStr(Request.ServerVariables("URL"))
 lenstrTemp=len(strTemp)+1
if instr(left(linkfile,lenstrTemp),"?")>0 then

if blockPage = 1 Then
 Response.Write "【←前10页 "
Else
 Response.Write("【<a href=" & LinkFile & "&page="&blockPage-10&">←前10页</a> ")
End If
 i=1
 Do Until i > 10 or blockPage > n
 If blockPage=int(gopage) Then
 Response.Write("["&blockPage&"]")
Else
 Response.Write(" <a href=" & LinkFile & "&page="&blockPage&">["&blockPage&"]</a> ")
 End If
 blockPage=blockPage+1
 i = i + 1
 Loop
if blockPage > totalpage Then
 Response.Write " 后10页→】"
Else
 Response.Write(" <a href=" & LinkFile & "&page="&blockPage&">后10页→</a>】")
End If
response.write" 直接到第 "
response.write"<select onchange=if(this.options[this.selectedIndex].value!=''){location=this.options[this.selectedIndex].value;}>"
 for i=1 to totalpage
 response.write"<option value='" & LinkFile & "&page=" & i & "'"
 if i=gopage then response.write"selected"
 response.write">"&i&"</option>"
 next
 response.write"</select>"
 response.write" 页 "

else

if blockPage = 1 Then
 Response.Write "【←前10页 "
Else
 Response.Write("【<a href=" & LinkFile & "?page="&blockPage-10&">←前10页</a> ")
End If
 i=1
 Do Until i > 10 or blockPage > n
 If blockPage=int(gopage) Then
 Response.Write("["&blockPage&"]")
Else
 Response.Write(" <a href=" & LinkFile & "?page="&blockPage&">["&blockPage&"]</a> ")
 End If
 blockPage=blockPage+1
 i = i + 1
 Loop
if blockPage > totalpage Then
 Response.Write " 后10页→】"
Else
 Response.Write(" <a href=" & LinkFile & "?page="&blockPage&">后10页→</a>】")
End If
response.write" 直接到第 "
response.write"<select onchange=if(this.options[this.selectedIndex].value!=''){location=this.options[this.selectedIndex].value;}>"
 for i=1 to totalpage
 response.write"<option value='" & LinkFile & "?page=" & i & "'"
 if i=gopage then response.write"selected"
 response.write">"&i&"</option>"
 next
 response.write"</select>"
 response.write" 页 "

End If

Startinfo=((gopage-1)*msg_per_page)+1
Endinfo=gopage*msg_per_page
if Endinfo>totalrec then Endinfo=totalrec
Response.Write("  共 "&totalrec&" 条信息当前显示第 "&Startinfo&" - "&Endinfo&" 条每页 "&msg_per_page&" 条信息共 "&n&" 页")
end if
End Function

'分页2
Function listPages2(LinkFile)
if not (rs.eof and rs.bof) then
gopage=currentpage
totalpage=n
blockPage=Int((gopage-1)/10)*10+1

if blockPage = 1 Then
 Response.Write "前10页 "
Else
 Response.Write("<a href=" & LinkFile & "&page="&blockPage-10&">前10页</a> ")
End If
 i=1
 Do Until i > 10 or blockPage > n
 If blockPage=int(gopage) Then
 Response.Write(""&blockPage&"")
Else
 Response.Write(" <a href=" & LinkFile & "&page="&blockPage&">"&blockPage&"</a> ")
 End If
 blockPage=blockPage+1
 i = i + 1
 Loop
if blockPage > totalpage Then
 Response.Write " 后10页"
Else
 Response.Write(" <a href=" & LinkFile & "&page="&blockPage&">后10页</a>")
End If
response.write" 直接到第 "
response.write"<select onchange=if(this.options[this.selectedIndex].value!=''){location=this.options[this.selectedIndex].value;}>"
 for i=1 to totalpage
 response.write"<option value='" & LinkFile & "&page=" & i & "'"
 if i=gopage then response.write"selected"
 response.write">"&i&"</option>"
 next
 response.write"</select>"
 response.write" 页 "

else

End If

'判断文件类型是否合格
Function CheckFileExt(FileExt)
Dim ForumUpload,i
ForumUpload="gif,jpg,bmp,jpeg,png"
ForumUpload=Split(ForumUpload,",")
CheckFileExt=False
For i=0 to UBound(ForumUpload)
   If LCase(FileExt)=Lcase(Trim(ForumUpload(i))) Then
    CheckFileExt=True
    Exit Function
   End If
Next
End Function
'格式后缀
Function FixName(UpFileExt)
If IsEmpty(UpFileExt) Then Exit Function
FixName = Lcase(UpFileExt)
FixName = Replace(FixName,Chr(0),"")
FixName = Replace(FixName,".","")
FixName = Replace(FixName,"asp","")
FixName = Replace(FixName,"asa","")
FixName = Replace(FixName,"aspx","")
FixName = Replace(FixName,"cer","")
FixName = Replace(FixName,"cdx","")
FixName = Replace(FixName,"htr","")
End Function
'文件Content-Type判断
Function CheckFileType(FileType)
CheckFileType = False
If Left(Cstr(Lcase(Trim(FileType))),6)="image/" Then CheckFileType = True
End Function
%>

前一页:利用asp相关的函数动态更新access数据库

后一页:熟记ASP+Access数据库的18条安全法则

相关阅读: css　a标签与如何利用css中text-indent实现文章缩进; 实现iis6与iis7环境下支持mp4视频随意拖动、预览播放、边下载边播放; uni-app微信小程序分享微信好友与分享到朋友圈功能; 旅行社网站模板默认风格6; 控制背景色; 一个利用select下拉选择框进行变色的网页效果; uni-app判断输入内容是否符合要求; 利用ResponseXML的方法调用163天气预报

共有0条关于《ASP过滤SQL中的非法字符并格式化相关的html代码》的评论: 发表评论

正在加载评论......

返回顶部发表评论

呢称:
表情:
内容:	评论内容:不能超过 1000 字,需审核,请自觉遵守互联网相关政策法规。
验证码:

网友评论声明,请自觉遵守互联网相关政策法规。

您发布的评论即表示同意遵守以下条款:
一、不得利用本站危害国家安全、泄露国家秘密,不得侵犯国家、社会、集体和公民的合法权益;
二、不得发布国家法律、法规明令禁止的内容;互相尊重,对自己在本站的言论和行为负责;
三、本站对您所发布内容拥有处置权。

更多信息>>栏目类别选择: 百度小程序开发; 微信小程序开发; 微信公众号开发; uni-app; asp函数库; ASP; DIV+CSS; HTML; python

更多>>同类信息: ASP中Utf-8与Gb2312编码转换乱码问题的解决方法页面编码声明; asp显示随机密码; 通过阿里云服务接口获得ip地址详细信息; iis点开后任务栏上有显示，但是窗口看不到的解决办法; RSA加密解密插件; 微软Encoder加密解密函数

更多>>最新添加文章: dw里面查找替换使用正则删除sqlserver里面的CONSTRAINT; Android移动端自动化测试：使用UIAutomatorViewer与Selenium定位元素; 抖音直播音挂载小雪花懂车帝小程序; javascript获取浏览器指纹可以用来做投票; 火狐Mozilla Firefox出现：无法载入您的Firefox配置文件它可能已经丢失或是无法访问问题解决集合处理办法; 在Android、iOS、Windows、MacOS中微信小程序的文件存放路径; python通过代码修改pip下载源让下载库飞起; python里面requests.post返回的res.text还有其它的吗

更多>>随机抽取信息: Dreamweaver错误：以下翻译器没有被装载，由于错误;xsltransform.htm;有不正确的设置信息; 超级经典一套鼠标控制左右滚动图片带自动翻滚; httpd.ini伪静态网站分享到微信好友微信朋友圈链接打不开报404错误的解决办法; 支持IE与firefox(火狐)的css写省略号方法; 深山网吧留言板系统(激情穿越火线)v4.3; windows2003的IIS文件上传大小限制的解决方案

更多标签热门标签

鎯生成 blog flash 多选破解工作控制收藏夹焦点滤镜注册表游戏框透明个性第几楼 photoshop openwin 格式化 DIV+CSS做的透明菜单兼容IE、FF等展开产品模式 ctrl 拖动 DW 设为首页货币做标图层 email 显示 tags 2.0 初级表达链接样式执行关于我们换行广告 cookies 滑过上一页字体 iis RegExp 特效在线