{"id":666,"date":"2011-01-28T09:39:20","date_gmt":"2011-01-28T01:39:20","guid":{"rendered":""},"modified":"2014-03-11T22:36:24","modified_gmt":"2014-03-11T14:36:24","slug":"asp%e4%b8%ad%e5%a6%82%e4%bd%95%e8%b0%83%e7%94%a8sql%e8%87%aa%e5%ae%9a%e4%b9%89%e5%87%bd%e6%95%b0","status":"publish","type":"post","link":"http:\/\/www.xiaoyebailong.com\/index.php\/2011\/01\/28\/666.htm","title":{"rendered":"ASP\u4e2d\u5982\u4f55\u8c03\u7528SQL\u81ea\u5b9a\u4e49\u51fd\u6570"},"content":{"rendered":"

\u518dASP\u7a0b\u5e8f\u4e2d\u5982\u4f55\u8c03\u7528SQL\u81ea\u5b9a\u4e49\u51fd\u6570\u5462\uff1f<\/strong><\/p>\n

\n <\/p>\n

\u8fd9\u662f\u6211\u7684\u8c03\u7528\u65b9\u6cd5\uff0c\u9ebb\u70e6\u5404\u4f4d\u7ed9\u6307\u70b9\u4e00\u4e0b<\/strong><\/p>\n

\n <\/p>\n

<%
\nDim connectionText,connections,cmdTemp,rst<\/strong><\/p>\n

\n <\/p>\n

connectionText="\u4f60\u597d<script"
\nSet conn = Server.CreateObject("ADODB.Connection")
\nconnections = "driver={SQL Server};server=.;uid=sa;pwd=;database=luntandb"
\nconn.open connections <\/strong><\/p>\n

\n <\/p>\n

Set cmdTemp=Server.CreateObject("ADODB.Command")
\nSet rst=Server.CreateObject("ADODB.Recordset")
\ncmdTemp.commandText = "dbo.HtmlEncode" ‘\u81ea\u5b9a\u4e49\u51fd\u6570\u540d\u79f0
\ncmdTemp.CommandType = 4
\nSet cmdTemp.ActiveConnection = conn
\ncmdTemp("@contentText") = connectionText
\ncmdTemp.execute()
\nrv =cmdTemp("@return_value")
\nresponse.Write(rv)
\n%><\/strong><\/p>\n

\n <\/p>\n

 <\/p>\n

\n <\/p>\n

\u8fd9\u662fSQL\u81ea\u5b9a\u4e49\u51fd\u6570– =============================================
\n— Author: <Author,,Name>
\n— Create date: <Create Date, ,>
\n— Description: <Description, ,>
\n— =============================================
\nALTER FUNCTION [dbo].[HtmlEncode]
\n(
\n@contentText varchar(5000)
\n)
\nRETURNS varchar(5000)
\nAS
\nBEGIN<\/strong><\/p>\n

\n <\/p>\n

SET @contentText = REPLACE(@contentText,'<script’,’&lt;script’);
\nSET @contentText = REPLACE(@contentText,'<link’,’&lt;link’);
\nSET @contentText = REPLACE(@contentText,'<ifream’,’&lt;ifream’);
\nSET @contentText = REPLACE(@contentText,'<style’,’&lt;style’);
\nSET @contentText = REPLACE(@contentText,’url(‘,’url\uff08’);
\nRETURN @contentText
\nEND<\/strong><\/p>\n

\n <\/p>\n

 <\/div>\n

\n\u95ee\u9898\u8865\u5145\uff1a<\/b>\u521a\u624d\u4fee\u6539\u4e86\u4e00\u4e0b\uff0c\u7528SQL\u8bed\u53e5\u8c03\u7528\uff0c\u73b0\u5728\u6539\u6210\u8fd9\u6837
\nDim str,ContentText
\nSet conn = Server.CreateObject("ADODB.Connection")
\nconnections = "driver={SQL Server};server=.;uid=sa;pwd=;database=luntandb"
\nconn.open connections
\nContentText="\u6d4b\u8bd5\u6d4b\u8bd5\u6d4b\u8bd5<script>alert(‘\u6d4b\u8bd5’)<\/script>"
\nSet rst=Server.CreateObject("ADODB.Recordset")
\nstr="select dbo.HtmlEncode(‘"&ContentText&"’)"
\nrst.open str,conn,1,1
\nresponse.Write(rst(0))
\n%>
\n <\/p>\n","protected":false},"excerpt":{"rendered":"

\u518dASP\u7a0b\u5e8f\u4e2d\u5982\u4f55\u8c03\u7528SQL\u81ea\u5b9a\u4e49\u51fd\u6570\u5462\uff1f   \u8fd9\u662f\u6211\u7684\u8c03\u7528\u65b9\u6cd5\uff0c\u9ebb\u70e6\u5404\u4f4d\u7ed9\u6307\u70b9\u4e00\u4e0b   <% Dim connectionText,connections,cmdTemp,rst   connectio…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"topic":[],"class_list":["post-666","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts\/666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/comments?post=666"}],"version-history":[{"count":1,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts\/666\/revisions"}],"predecessor-version":[{"id":66538,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts\/666\/revisions\/66538"}],"wp:attachment":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/media?parent=666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/categories?post=666"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/tags?post=666"},{"taxonomy":"topic","embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/topic?post=666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}