PageRenderTime 30ms CodeModel.GetById 1ms RepoModel.GetById 0ms app.codeStats 0ms

/s.asp

https://github.com/74hu/74hujz
ASP | 68 lines | 38 code | 4 blank | 26 comment | 1 complexity | 3a2f1a06ca7559ffd83fc3e54f4c5e00 MD5 | raw file
    

  1. <%

    2. 

  2. '

    3. 

  3. '	七色虎建站系统

    4. 

  4. '	攻击捕获文件S.asp

    5. 

  5. '	用于捕获SQL攻击信息，便于后台管理

    6. 

  6. '	v0.0.1.143a

    7. 

  7. '	2011.9.3

    8. 

  8. 

    9. 

  9. HU_In = "74hu_|exec|insert|select|delete| count|master|truncate|declare|drop|create|eval|xp_|sp_|command|dir|update |cmd|ascii| from| net| or"

    10. 

  10. 

    11. 

  11. if instr(Request.ServerVariables("HTTP_CONTENT_TYPE"),"multipart/form-data")=0 then

    12. 

  12. HU_Inf = split(HU_In,"|")

    13. 

  13. If Request.Form<>"" Then

    14. 

  14. For Each HU_Post In Request.Form

    15. 

  15. 

    16. 

  16. For HU_Xh=0 To Ubound(HU_Inf)

    17. 

  17. If Instr(LCase(Request.Form(HU_Post)),HU_Inf(HU_Xh))<>0 Then

    18. 

  18. set rs=Server.CreateObject("ADODB.Recordset")

    19. 

  19. rs.open"select * from 74hu_sql",conn,1,2

    20. 

  20. rs.addnew

    21. 

  21. rs("HU_ip")=User_Ip

    22. 

  22. rs("HU_str")=HU_Inf(HU_Xh)

    23. 

  23. rs.update

    24. 

  24. rs.close

    25. 

  25. set rs=Nothing

    26. 

  26. ' Response.clear

    27. 

  27. ' Response.ContentType="text/vnd.wap.wml; charset=utf-8"

    28. 

  28. ' Response.Write "<?xml version=""1.0"" encoding=""utf-8""?><!DOCTYPE wml PUBLIC ""-//WAPFORUM//DTD WML 1.1//EN"" ""http://www.wapforum.org/DTD/wml_1.1.xml"">" & vbnewline

    29. 

  29. ' Response.Write "<wml><head><meta http-equiv=""Cache-Control"" content=""no-cache""/></head>" & vbnewline

    30. 

  30. ' Response.Write "<card title=""提示""><p align=""left"">" & vbnewline

    31. 

  31. ' Response.Write "本系统做了防SQL注入，如果您不能访问请与管理员联系！<br/>" & vbnewline

    32. 

  32. ' Response.Write "非法参数："&HU_Inf(HU_Xh)&"<br/>" & vbnewline

    33. 

  33. ' Response.write "<anchor><prev/>返回上级</anchor>" & vbnewline

    34. 

  34. ' Response.Write "</p></card></wml>"

    35. 

  35. ' Response.End

    36. 

  36. End If

    37. 

  37. Next

    38. 

  38. Next

    39. 

  39. End If

    40. 

  40. If Request.QueryString<>"" Then

    41. 

  41. For Each HU_Get In Request.QueryString

    42. 

  42. 

    43. 

  43. For HU_Xh=0 To Ubound(HU_Inf)

    44. 

  44. If Instr(LCase(Request.QueryString(HU_Get)),HU_Inf(HU_Xh))<>0 Then

    45. 

  45. set rs=Server.CreateObject("ADODB.Recordset")

    46. 

  46. rs.open"select * from 74hu_sql",conn,1,2

    47. 

  47. rs.addnew

    48. 

  48. rs("HU_ip")=User_Ip

    49. 

  49. rs("HU_str")=HU_Inf(HU_Xh)

    50. 

  50. rs.update

    51. 

  51. rs.close

    52. 

  52. set rs=Nothing

    53. 

  53. ' Response.clear

    54. 

  54. ' Response.ContentType="text/vnd.wap.wml; charset=utf-8"

    55. 

  55. ' Response.Write "<?xml version=""1.0"" encoding=""utf-8""?><!DOCTYPE wml PUBLIC ""-//WAPFORUM//DTD WML 1.1//EN"" ""http://www.wapforum.org/DTD/wml_1.1.xml"">" & vbnewline

    56. 

  56. ' Response.Write "<wml><head><meta http-equiv=""Cache-Control"" content=""no-cache""/></head>" & vbnewline

    57. 

  57. ' Response.Write "<card title=""提示""><p align=""left"">" & vbnewline

    58. 

  58. ' Response.Write "本系统做了防SQL注入，如果您不能访问请与管理员联系！<br/>" & vbnewline

    59. 

  59. ' Response.Write "非法参数："&HU_Inf(HU_Xh)&"<br/>" & vbnewline

    60. 

  60. ' Response.write "<anchor><prev/>返回上级</anchor>" & vbnewline

    61. 

  61. ' Response.Write "</p></card></wml>"

    62. 

  62. ' Response.End

    63. 

  63. End If

    64. 

  64. Next

    65. 

  65. Next

    66. 

  66. End If

    67. 

  67. End If

    68. 

  68. %>
    69.