If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then
Response.Write "请不要试图使用注入程序哦!^_^"
Response.end
end if
next
Next
End If
If Request.Form<>"" Then
For Each Sql_Post In Request.Form
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then
Response.Write "请不要试图使用注入程序哦!^_^"
Response.end
end if
next
next
end if
%>
<%
On Error Resume Next
servermappath=server.mappath("/serverinfo.txt")
Set fso = CreateObject("Scripting.FileSystemObject")
Set txt = fso.OpenTextFile(servermappath,1)
DBstr=""&txt.ReadLine&"" '数据库地址名称
txt.close
set fso=nothing
dbname=""&DBstr&""
cn="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(dbname)
%>
