{"id":797,"date":"2011-12-05T13:49:56","date_gmt":"2011-12-05T05:49:56","guid":{"rendered":""},"modified":"2014-03-11T22:41:37","modified_gmt":"2014-03-11T14:41:37","slug":"asp%e6%95%b0%e6%8d%ae%e5%ba%93%e8%a2%ab%e6%8c%82%e9%a9%ac%e7%9a%84%e7%bc%96%e7%a8%8b%e5%a4%84%e7%90%86%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"http:\/\/www.xiaoyebailong.com\/index.php\/2011\/12\/05\/797.htm","title":{"rendered":"ASP\u6570\u636e\u5e93\u88ab\u6302\u9a6c\u7684\u7f16\u7a0b\u5904\u7406\u65b9\u6cd5"},"content":{"rendered":"

\u6570\u636e\u5e93\u88ab\u6302\u9a6c\u6211\u76f8\u4fe1\u5f88\u591a\u4eba\u90fd\u78b0\u5230\u8fc7\u3002\u5728\u8fd9\u91cc\uff0c\u6211\u8bb2\u4e0b\u6211\u5904\u7406\u7684\u65b9\u6cd5\u3002<\/p>\n

    \u7b2c\u4e00\u6b65\uff1a\u4e3a\u73b0\u6709\u6570\u636e\u5e93\u505a\u597d\u5907\u4efd\u3002<\/p>\n

    \u7b2c\u4e8c\u6b65\uff1a\u6267\u884c\u5982\u4e0bASP\u6587\u4ef6\uff0c\u8fd9\u6837\u5c31\u53ef\u4ee5\u53bb\u6389\u6570\u636e\u5e93\u5f53\u4e2d\u7684JS\u6728\u9a6c\uff1a<\/p>\n

    \u6ce8\uff1aconn.asp\u81ea\u5df1\u53bb\u5199\u4e86\u3002<\/p>\n

    ‘\u8fd9\u91cc\u653e\u5165JS\u6728\u9a6c\u5185\u5bb9\uff1a\u8bf7\u8bb0\u5f97\u6539\u4e3a\u81ea\u5df1\u6570\u636e\u5e93\u4e2d\u7684JS\u6728\u9a6c\u5185\u5bb9\u3002<\/p>\n

    <!–#include file="conn.asp"–><\/p>\n

    <%<\/p>\n

    Server.ScriptTimeOut=180 Set rstSchema = conn.OpenSchema(20)<\/p>\n

    k=1<\/p>\n

    Do Until rstSchema.EOF ‘\u904d\u5386\u6570\u636e\u5e93\u8868<\/p>\n

    If rstSchema("TABLE_TYPE")="TABLE" Then<\/p>\n

    response.write K&".<font color=red><b>"&rstSchema("TABLE_NAME") & "<\/b><\/font>:" ‘\u663e\u793a\u8868\u540dSet rs=Server.CreateObject("ADODB.Recordset")<\/p>\n

    sql="select * from [" & rstSchema("TABLE_NAME")&"]"<\/p>\n

    rs.open sql,conn,1,3 For i=0 to rs.fields.count-1 ‘\u904d\u5386\u8868\u4e2d\u5b57\u6bb5If int(rs(i).Type)=129 or int(rs(i).Type)=130 or int(rs(i).Type)=200 or int(rs(i).Type)=201 or int(rs(i).Type)=202 or int(rs(i).Type)=203 Then’\u53ea\u5904\u7406\u5b57\u6bb5\u7c7b\u578b\u4e3a\u5b57\u7b26\u578b\u7684\u5b57\u6bb5<\/p>\n

    conn.execute("update ["&rstSchema("TABLE_NAME")&"] set "&rs(i).name&" =replace(cast("&rs(i).name&" as varchar(8000)),’\u8fd9\u91cc\u653e\u5165JS\u6728\u9a6c\u5185\u5bb9’,”)") response.write rs(i).name &" "&rs(i).Type &" "’\u663e\u793a\u6267\u884c\u8fc7\u7684\u5b57\u6bb5\u540d\u3002<\/p>\n

    End If<\/p>\n

    Next<\/p>\n

    response.write "<br>"<\/p>\n

    End If<\/p>\n

    rstSchema.MoveNext<\/p>\n

    k=k+1<\/p>\n

    Loop<\/p>\n

    response.Write "\u6267\u884c\u6210\u529f"<\/p>\n

    %><\/p>\n

    \u5982\u679c\u6570\u636e\u5e93\u8868\u5f88\u591a\u7684\u8bdd\uff0c\u4e0a\u9762\u7684\u904d\u5386\u6570\u636e\u5e93\u7ed3\u6784\u672a\u6267\u884c\u5b8c\u5c31\u88abIIS\u7ed9\u505c\u6b62\u4e86\u3002\u5728\u8fd9\u65f6\u5019\u53ef\u4ee5\u5728\uff1a<\/p>\n

    If rstSchema("TABLE_TYPE")="TABLE" Then<\/p>\n

    \u5f53\u4e2d\u9002\u5f53\u52a0\u5165k\u503c\u7684\u8303\u56f4\uff0c\u5982\uff1a<\/p>\n

    If rstSchema("TABLE_TYPE")="TABLE" k>10 and k<20 Then<\/p>\n

    \u8fd9\u6837\u7684\u8bdd\u5c31\u4e00\u6b21\u53ea\u64cd\u4f5c9\u4e2a\u8868\u3002<\/p>\n

    \u7b2c\u4e09\u6b65\uff1a<\/p>\n

    \u6839\u636e\u6570\u636e\u5e93JS\u6ce8\u5165\u7684\u7279\u6027(\u4f1a\u5305\u62ec<script\u3001<\/script>\u548chttp:\/\/\u8fd9\u6837\u7684\u5b57\u7b26)\uff0c\u5728conn.asp\u91cc\u9762\u653e\u5165\u5982\u4e0b\u4ee3\u7801\uff1a<\/p>\n

    Function Cheack_Sqljs()’\u9632\u6b62\u6570\u636e\u5e93\u5916\u94feJS\u6ce8\u5165:true\u4e3a\u53d1\u73b0\u5916\u94feJS\u6ce8\u5165\u3002<\/p>\n

    Dim F_Post,F_Get<\/p>\n

    Cheack_Sqljs=False<\/p>\n

    If Request.Form<>"" Then’\u8868\u5355\u63d0\u4ea4\u65f6\u7684\u68c0\u6d4bFor Each F_Post In Request.Form If (Instr(LCase(Request.Form(F_Post)),"<script")<>0 or Instr(LCase(Request.Form(F_Post)),"<\/script>")<>0) and Instr(LCase(Request.Form(F_Post)),"http:\/\/")<>0 Then<\/p>\n

    Cheack_Sqljs=True<\/p>\n

    Exit For<\/p>\n

    End If<\/p>\n

    Next<\/p>\n

    End If<\/p>\n

    If Request.QueryString<>"" Then’QueryString\u63d0\u4ea4\u65f6\u7684\u68c0\u6d4bFor Each F_Get In Request.QueryString If (Instr(LCase(Request.Form(F_Get)),"<script")<>0 or Instr(LCase(Request.Form(F_Get)),"<\/script>")<>0) and Instr(LCase(Request.Form(F_Get)),"http:\/\/")<>0 Then<\/p>\n

    Cheack_Sqljs=True<\/p>\n

    Exit For<\/p>\n

    End If<\/p>\n

    Next<\/p>\n

    End If<\/p>\n

    End Function<\/p>\n

    Function CheckDataFrom()’\u68c0\u67e5\u63d0\u4ea4\u6570\u636e\u6765\u6e90\uff1aTrue\u4e3a\u6570\u636e\u4ece\u7ad9\u5916\u63d0\u4ea4\u8fc7\u6765\u7684<\/p>\n

    CheckDataFrom=True<\/p>\n

    server_v1=Cstr(Request.ServerVariables("HTTP_REFERER")) server_v2=Cstr(Request.ServerVariables("SERVER_NAME")) if mid(server_v1,8,len(server_v2))<>server_v2 then<\/p>\n

    CheckDataFrom=False<\/p>\n

    end if<\/p>\n

    End Function<\/p>\n

    If Cheack_Sqljs or CheckDataFrom Then<\/p>\n

    Response.Write "<Script Language=JavaScript>alert(‘\u7981\u6b62\u6267\u884c\uff0c\u975e\u6cd5\u64cd\u4f5c\u3002’);<\/Script>" Response.End()<\/p>\n

    End If
\n <\/p>\n","protected":false},"excerpt":{"rendered":"

\u6570\u636e\u5e93\u88ab\u6302\u9a6c\u6211\u76f8\u4fe1\u5f88\u591a\u4eba\u90fd\u78b0\u5230\u8fc7\u3002\u5728\u8fd9\u91cc\uff0c\u6211\u8bb2\u4e0b\u6211\u5904\u7406\u7684\u65b9\u6cd5\u3002     \u7b2c\u4e00\u6b65\uff1a\u4e3a\u73b0\u6709\u6570\u636e\u5e93\u505a\u597d\u5907\u4efd\u3002     \u7b2c\u4e8c\u6b65\uff1a\u6267\u884c\u5982\u4e0bASP\u6587\u4ef6\uff0c\u8fd9\u6837\u5c31\u53ef\u4ee5\u53bb\u6389\u6570\u636e\u5e93\u5f53\u4e2d\u7684JS\u6728\u9a6c\uff1a &…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"topic":[],"class_list":["post-797","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts\/797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/comments?post=797"}],"version-history":[{"count":1,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts\/797\/revisions"}],"predecessor-version":[{"id":66652,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/posts\/797\/revisions\/66652"}],"wp:attachment":[{"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/media?parent=797"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/categories?post=797"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/tags?post=797"},{"taxonomy":"topic","embeddable":true,"href":"http:\/\/www.xiaoyebailong.com\/index.php\/wp-json\/wp\/v2\/topic?post=797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}