黑客通用如ASP没有过滤函数用这个就可以跑到你的后台 'or''=''or''or'　　　asp'or'1 'or'='or' 'or''='

下面是102.ASP文件

<% function china2008(aspdic) if not isnull(aspdic) then if instr(aspdic,";")<>0 or instr(aspdic,"&")<>0 or instr(aspdic,">")<>0 or instr(aspdic,",")<>0 or instr(aspdic,"=")<>0 or instr(aspdic,"%")<>0 or instr(aspdic,"'")<>0 then
response.write"所输入的数据包含非法字符"
response.end
end if
end if
end function

china2008(request.form("userid"))
china2008(request.form("password"))
%>

本文固定链接: http://blog.duoday.com/2005/95.html | 奇风's Blog