?? function.asp
字號:
<!--#include file="inc/conn.asp"-->
<%
function RequestX(strGet)
strTemp=Trim(Request.Form(strGet))
dim nothis(16)
nothis(0)="net user"
nothis(1)="xp_cmdshell"
nothis(2)="/add"
nothis(3)="exec%20master.dbo.xp_cmdshell"
nothis(4)="net localgroup administrators"
nothis(5)="select"
nothis(6)="count"
nothis(7)="asc"
nothis(8)="char"
nothis(9)="mid"
nothis(10)="'"
nothis(11)=""""
nothis(12)="insert"
nothis(13)="delete"
nothis(14)="drop"
nothis(15)="truncate"
nothis(16)="from"
for i=1 to ubound(nothis)
if instr(strTemp,nothis(i)) then
Response.write "你輸入的內容含有非法字符!"
Response.write "請<a href='login.html'>返回重試</a>"
Response.End
end if
next
RequestX=strTemp
end function
'function errOccur(strErr)
'Response.write "您的輸入中存在問題:"&strErr&"<br>"
'Response.write "請<a href='login.html'>返回重試</a>"
'Response.End
'end function
'
'username=RequestX("username")
'password=RequestX("password")
'strSql="select * from userlist where username='"&username&"'and password='"&password&"'"
'set objRs=Server.CreateObject("ADODB.RECORDSET")
'objRs.open strSql,conn,1,1
'if objRs.eof then
'errOccur("登錄失敗,請檢查您輸入的用戶名與密碼是否正確")
'else
'response.write("登陸成功!")
'Session("username")=username
'end if
'conn.execute "update userlist set logintimes=logintimes+1 where username='"&RequestX("username")&"'"
%>
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -