ASP防止GET,Post注入和防止服務(wù)器攻擊,并記錄IP_ASP教程

教程Tag：暫無Tag,歡迎添加,賺取U幣!

推薦：ASP將IP地址最后一位替換成星號(hào)實(shí)例代碼
先將IP地址存入數(shù)據(jù)庫，然后取出來，效果如圖：代碼如下： % '來源 ipstr= rs(cIP) ipstr=split(ipstr,.,-1,1) ipstrout=ipstr(0).ipstr(1).ipstr(2).* response.write ipstrout %

<%
'防止GET,Post注入和防止服務(wù)器攻擊
'使用方法把本文件包含到需要防注的文件就OK了,說明下,這里的post攻擊和Get攻擊不一定是攻擊,在英文版本的時(shí)候請(qǐng)注意使用
'馮旭修改
session.Abandon()

Dim fxjt111_Attack_post,fxjt111_Attack_Get,fxjt111_Attack_System
fxjt111_Attack_post="/Attack.txt" '攻擊記錄fxjt111_Attack_post為Post攻擊記錄文件名.
fxjt111_Attack_Get="/Attack.txt" 'fxjt111_Attack_Get為GET攻擊記錄文件名
fxjt111_Attack_System="/Attack_system.txt" 'fxjt111_Attack_System為系統(tǒng)攻擊記錄文件名

Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr
Fy_In = "'★;★and★exec★insert★select★delete★update★count★*★%★chr★mid★master★truncate★char★declare"
'----------------------------------

Fy_Inf = split(Fy_In,"★")
'--------POST部份------------------
If Request.Form<>"" Then
For Each Fy_Post In Request.Form

For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then
'記錄post攻擊開始
Dim ValidEntry_Post
ValidEntry_Post = True
If not IsEmpty(Session("LogIn_post")) Then ValidEntry_Post = False
If ValidEntry_Post Then
Const ForAppending_Post = 8
Const Create_Post = true
Dim FSO_Post
DIM TS_Post
DIM MyFileName_Post
'Dim strLog
Dim strTime_Post,strip_Post,strurll_Post,strwords_Post
MyFileName_Post = Server.MapPath(fxjt111_Attack_post)
Set FSO_Post = Server.CreateObject("Scripting.FileSystemObject")
Set TS_Post = FSO_Post.OpenTextFile(MyFileName_Post, ForAppending_Post, Create_Post)
strip_Post=Request.ServerVariables ("REMOTE_ADDR") & ""
if strip_Post="" then
strip_Post=Request.ServerVariables("HTTP_X_FORWARDED_FOR") & ""
end if
'strurll_Post=request.servervariables("http_referer")
strwords_Post=request.servervariables("query_string")
strTime_Post=now()

分享：全角半角轉(zhuǎn)換代碼
javascript轉(zhuǎn)換： SCRIPT /* **************************** * 參數(shù)說明: * str:要轉(zhuǎn)換的字符串 * flag:標(biāo)記，為０時(shí)半轉(zhuǎn)全，為非０時(shí)全轉(zhuǎn)半 * 返回值類型：字符串 **************************** */ function DBC2SBC(str,flag) { var i; var result=''; if (