站长中国企业4.0的安全问题
站长中国企业4.0的安全问题
都有调用到这个页面: weburl.asp
<%
str1="http://" & request.ServerVariables("Server_Name")
str1=str1 & request.ServerVariables("PATH_INFO")
if request.ServerVariables("QUERY_STRING")<>"" then
str1=str1 & "?" & request.ServerVariables("QUERY_STRING")
end if
if pos = Instr(str1,"'")=false then
response.Write("<center>对不起，变量传输错误！</center>")
response.End()
end if
re_url="[url=http://]http://"&Request.ServerVariables("server_name[/url]")
'------定义部份 头----------------------------------------------------------------------
...................
function chk(in_string)
last_str=in_string
last_str=replace(last_str,"=","")
last_str=replace(last_str,"%","")
last_str=replace(last_str,chr(32),"")
last_str=replace(last_str,"?","")
last_str=replace(last_str,"&","")
last_str=replace(last_str,";","")
last_str=replace(last_str,",","")
last_str=replace(last_str,"'","")
last_str=replace(last_str,",","")
last_str=replace(last_str,chr(34),"")
last_str=replace(last_str,chr(9),"")
last_str=replace(last_str,"","")
last_str=replace(last_str,"$","")
chk=last_str
end function
%>
这两部份什么意思?
[ 本帖最后由 kangmile 于 2008-2-22 08:59 编辑 ]
