<% '------------------sql zhuru '-----------防注入代码---------------- '--------定义部份------------------ 'Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr '自定义需要过滤的字串,用 "|||" 分隔 Fy_In = "'|||;|||and|||exec|||insert|||select|||delete|||update|||count|||*|||%|||chr|||mid|||master|||truncate|||char|||declare" '---------------------------------- Fy_Inf = split(Fy_In,"|||") '--------POST部份------------------ If Request.Form<>"" Then For Each Fy_Post In Request.Form For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If '---------------------------------- '--------GET部份------------------- If Request.QueryString<>"" Then For Each Fy_Get In Request.QueryString For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If ''''''''''-----------sql end %> <% if nosb(trim(request("key")))<>"" then pkey=nosb(trim(request("key"))) else pkey="windows" end if %> <% function opentxt(namestr) dim funstr funstr = "" set fs=server.createobject("scripting.filesystemobject") filepath = Server.MapPath("\school\txt") filepath = filepath & "\" & namestr 'response.write filepath if fs.FileExists(filepath) then set mytextfile=fs.opentextfile(filepath) 'response.write mytextfile.readall funstr = mytextfile.readall mytextfile.close set mytextfile=nothing end if set fs=nothing opentxt = funstr end function %>

<% select case pkey case "windows" response.write opentxt("2005doc_1543windows.txt") case "linux" response.write opentxt("2005doc_1543linux.txt") case "freebsd" response.write opentxt("2005doc_1543freebsd.txt") case "aix" response.write opentxt("2005doc_1543aix.txt") case "hp-unix" response.write opentxt("2005doc_1543hp-unix.txt") case "sco" response.write opentxt("2005doc_1543sco.txt") case "solaris" response.write opentxt("2005doc_1543solaris.txt") case "as400" response.write opentxt("2005doc_1543as400.txt") case "netware" response.write opentxt("2005doc_1543netware.txt") case "tru64" response.write opentxt("2005doc_1543tru64.txt") case "macosx" response.write opentxt("2005doc_1543macosx.txt") case "irix" response.write opentxt("2005doc_1543irix.txt") case else response.write opentxt("2005doc_1543windows.txt") end select %> <% select case pkey case "windows" response.write opentxt("2005doc_1544windows.txt") case "linux" response.write opentxt("2005doc_1544linux.txt") case "freebsd" response.write opentxt("2005doc_1544freebsd.txt") case "aix" response.write opentxt("2005doc_1544aix.txt") case "hp-unix" response.write opentxt("2005doc_1544hp-unix.txt") case "sco" response.write opentxt("2005doc_1544sco.txt") case "solaris" response.write opentxt("2005doc_1544solaris.txt") case "as400" response.write opentxt("2005doc_1544as400.txt") case "netware" response.write opentxt("2005doc_1544netware.txt") case "tru64" response.write opentxt("2005doc_1544tru64.txt") case "macosx" response.write opentxt("2005doc_1544macosx.txt") case "irix" response.write opentxt("2005doc_1544irix.txt") case else response.write opentxt("2005doc_1544windows.txt") end select %>

<% select case pkey case "windows" response.write opentxt("2005doc_1545windows.txt") case "linux" response.write opentxt("2005doc_1545linux.txt") case "freebsd" response.write opentxt("2005doc_1545freebsd.txt") case "aix" response.write opentxt("2005doc_1545aix.txt") case "hp-unix" response.write opentxt("2005doc_1545hp-unix.txt") case "sco" response.write opentxt("2005doc_1545sco.txt") case "solaris" response.write opentxt("2005doc_1545solaris.txt") case "as400" response.write opentxt("2005doc_1545as400.txt") case "netware" response.write opentxt("2005doc_1545netware.txt") case "tru64" response.write opentxt("2005doc_1545tru64.txt") case "macosx" response.write opentxt("2005doc_1545macosx.txt") case "irix" response.write opentxt("2005doc_1545irix.txt") case else response.write opentxt("2005doc_1545windows.txt") end select %> <% select case pkey case "windows" response.write opentxt("2005doc_1546windows.txt") case "linux" response.write opentxt("2005doc_1546linux.txt") case "freebsd" response.write opentxt("2005doc_1546freebsd.txt") case "aix" response.write opentxt("2005doc_1546aix.txt") case "hp-unix" response.write opentxt("2005doc_1546hp-unix.txt") case "sco" response.write opentxt("2005doc_1546sco.txt") case "solaris" response.write opentxt("2005doc_1546solaris.txt") case "as400" response.write opentxt("2005doc_1546as400.txt") case "netware" response.write opentxt("2005doc_1546netware.txt") case "tru64" response.write opentxt("2005doc_1546tru64.txt") case "macosx" response.write opentxt("2005doc_1546macosx.txt") case "irix" response.write opentxt("2005doc_1546irix.txt") case else response.write opentxt("2005doc_1546windows.txt") end select %> <% select case pkey case "windows" response.write opentxt("2005doc_1547windows.txt") case "linux" response.write opentxt("2005doc_1547linux.txt") case "freebsd" response.write opentxt("2005doc_1547freebsd.txt") case "aix" response.write opentxt("2005doc_1547aix.txt") case "hp-unix" response.write opentxt("2005doc_1547hp-unix.txt") case "sco" response.write opentxt("2005doc_1547sco.txt") case "solaris" response.write opentxt("2005doc_1547solaris.txt") case "as400" response.write opentxt("2005doc_1547as400.txt") case "netware" response.write opentxt("2005doc_1547netware.txt") case "tru64" response.write opentxt("2005doc_1547tru64.txt") case "macosx" response.write opentxt("2005doc_1547macosx.txt") case "irix" response.write opentxt("2005doc_1547irix.txt") case else response.write opentxt("2005doc_1547windows.txt") end select %> <% select case pkey case "windows" response.write opentxt("2005doc_1548windows.txt") case "linux" response.write opentxt("2005doc_1548linux.txt") case "freebsd" response.write opentxt("2005doc_1548freebsd.txt") case "aix" response.write opentxt("2005doc_1548aix.txt") case "hp-unix" response.write opentxt("2005doc_1548hp-unix.txt") case "sco" response.write opentxt("2005doc_1548sco.txt") case "solaris" response.write opentxt("2005doc_1548solaris.txt") case "as400" response.write opentxt("2005doc_1548as400.txt") case "netware" response.write opentxt("2005doc_1548netware.txt") case "tru64" response.write opentxt("2005doc_1548tru64.txt") case "macosx" response.write opentxt("2005doc_1548macosx.txt") case "irix" response.write opentxt("2005doc_1548irix.txt") case else response.write opentxt("2005doc_1548windows.txt") end select %> <% select case pkey case "windows" response.write opentxt("2005doc_1549windows.txt") case "linux" response.write opentxt("2005doc_1549linux.txt") case "freebsd" response.write opentxt("2005doc_1549freebsd.txt") case "aix" response.write opentxt("2005doc_1549aix.txt") case "hp-unix" response.write opentxt("2005doc_1549hp-unix.txt") case "sco" response.write opentxt("2005doc_1549sco.txt") case "solaris" response.write opentxt("2005doc_1549solaris.txt") case "as400" response.write opentxt("2005doc_1549as400.txt") case "netware" response.write opentxt("2005doc_1549netware.txt") case "tru64" response.write opentxt("2005doc_1549tru64.txt") case "macosx" response.write opentxt("2005doc_1549macosx.txt") case "irix" response.write opentxt("2005doc_1549irix.txt") case else response.write opentxt("2005doc_1549windows.txt") end select %> <% select case pkey case "windows" response.write opentxt("2005doc_1550windows.txt") case "linux" response.write opentxt("2005doc_1550linux.txt") case "freebsd" response.write opentxt("2005doc_1550freebsd.txt") case "aix" response.write opentxt("2005doc_1550aix.txt") case "hp-unix" response.write opentxt("2005doc_1550hp-unix.txt") case "sco" response.write opentxt("2005doc_1550sco.txt") case "solaris" response.write opentxt("2005doc_1550solaris.txt") case "as400" response.write opentxt("2005doc_1550as400.txt") case "netware" response.write opentxt("2005doc_1550netware.txt") case "tru64" response.write opentxt("2005doc_1550tru64.txt") case "macosx" response.write opentxt("2005doc_1550macosx.txt") case "irix" response.write opentxt("2005doc_1550irix.txt") case else response.write opentxt("2005doc_1550windows.txt") end select %>