防止SQL注入

防止SQL注入 有严重问，可能是摆放位置不对! <% '防止SQL注入 dim urlnlu urlnlu=LCase(Request.ServerVariables("QUERY_STRING")) if instr(urlnlu,"select")>0 OR instr(urlnlu,"")>0 OR instr(urlnlu,"")>0_ OR instr(urlnlu,")")>0 OR instr(urlnlu,"(")>0 OR instr(urlnlu,"*")>0_ OR instr(urlnlu,CHR(32))>0 OR instr(urlnlu,"where")>0 OR instr(urlnlu,"and")>0_ OR instr(urlnlu,"not")>0 OR instr(urlnlu,",")>0 OR instr(urlnlu,"from")>0_ OR instr(urlnlu,"sum")>0 OR instr(urlnlu,"avg")>0 OR instr(urlnlu,"max")>0_ OR instr(urlnlu,"min")>0 OR instr(urlnlu,"delete")>0 OR instr(urlnlu,"insert")>0_ OR instr(urlnlu,"table")>0 OR instr(urlnlu,"update")>0 then response.write("您请求的地址拼写被拒绝") response.End end if %>