ASP编程：ASP最新SQL防注进过滤涵数 Object

仓酷云 发表于 2015-1-16 22:11:39

ASP编程：ASP最新SQL防注进过滤涵数

在实现ERP等高端的ASP应用时，用户需要提供核心的经营资料，需要ASP商有很高的信用度。楼上说交互性不好，太牵强了吧。在微软提供的一套框架中，利用asp做网站，开发效率高，使用人数少，减少不必要的开销。交互性是互动方式，是有开发人员决定的。sql|防注进FunctionCheckstr(Str)
IfIsnull(Str)Then
CheckStr=""
ExitFunction
EndIf
Str=Replace(Str,Chr(0),"",1,-1,1)
Str=Replace(Str,"""",""",1,-1,1)
Str=Replace(Str,"<","<",1,-1,1)
Str=Replace(Str,">",">",1,-1,1)
Str=Replace(Str,"script","script",1,-1,0)
Str=Replace(Str,"SCRIPT","SCRIPT",1,-1,0)
Str=Replace(Str,"Script","Script",1,-1,0)
Str=Replace(Str,"script","Script",1,-1,1)
Str=Replace(Str,"object","object",1,-1,0)
Str=Replace(Str,"OBJECT","OBJECT",1,-1,0)
Str=Replace(Str,"Object","Object",1,-1,0)
Str=Replace(Str,"object","Object",1,-1,1)
Str=Replace(Str,"applet","applet",1,-1,0)
Str=Replace(Str,"APPLET","APPLET",1,-1,0)
Str=Replace(Str,"Applet","Applet",1,-1,0)
Str=Replace(Str,"applet","Applet",1,-1,1)
Str=Replace(Str,"[","[")
Str=Replace(Str,"]","]")
Str=Replace(Str,"""","",1,-1,1)
Str=Replace(Str,"=","=",1,-1,1)
Str=Replace(Str,"","",1,-1,1)
Str=Replace(Str,"select","select",1,-1,1)
Str=Replace(Str,"execute","execute",1,-1,1)
Str=Replace(Str,"exec","exec",1,-1,1)
Str=Replace(Str,"join","join",1,-1,1)
Str=Replace(Str,"union","union",1,-1,1)
Str=Replace(Str,"where","where",1,-1,1)
Str=Replace(Str,"insert","insert",1,-1,1)
Str=Replace(Str,"delete","delete",1,-1,1)
Str=Replace(Str,"update","update",1,-1,1)
Str=Replace(Str,"like","like",1,-1,1)
Str=Replace(Str,"drop","drop",1,-1,1)
Str=Replace(Str,"create","create",1,-1,1)
Str=Replace(Str,"rename","rename",1,-1,1)
Str=Replace(Str,"count","count",1,-1,1)
Str=Replace(Str,"chr","chr",1,-1,1)
Str=Replace(Str,"mid","mid",1,-1,1)
Str=Replace(Str,"truncate","truncate",1,-1,1)
Str=Replace(Str,"nchar","nchar",1,-1,1)
Str=Replace(Str,"char","char",1,-1,1)
Str=Replace(Str,"alter","alter",1,-1,1)
Str=Replace(Str,"cast","cast",1,-1,1)
Str=Replace(Str,"exists","exists",1,-1,1)
Str=Replace(Str,Chr(13),"<br>",1,-1,1)
CheckStr=Replace(Str,"","",1,-1,1)
EndFunction
对用户来说可预见费用、节约费用，可以做到花少钱办大事。由于省去了购买软件和硬件等的前期费用，用户可以租用较高级的应用软件。ASP的收费是根据软件的类型、客制化程度、用户数量、服务期限来定的，对客户来说这笔费用是可以预见的。方便于客户应用软件的升级。

兰色精灵 发表于 2015-1-18 22:16:40

ASP主要是用好六个对象，其实最主要的是用好其中两个：response和request，就可以随心所欲地控制网页变换和响应用户动作了。

金色的骷髅 发表于 2015-1-24 15:40:27

我可以结合自己的经验大致给你说一说，希望对你有所帮助，少走些弯路。

精灵巫婆 发表于 2015-2-1 23:50:26

如何学好ASP,以前也有人问过,把回答给你转过来看看能否对你有帮助:

冷月葬花魂 发表于 2015-2-7 16:44:11

尽管MS自己讲C#内核中更多的象VC，但实际上我还是认为它和Java更象一些吧。首先它是面向对象的编程语言，而不是一种脚本，所以它具有面向对象编程语言的一切特性，比如封装性、继承性、多态性等等，这就解决了刚才谈到的ASP的那些弱点。

简单生活 发表于 2015-2-22 16:36:26

多看多学多思。多看一些关于ASP的书籍，一方面可以扩展知识面一方面可以鉴借别人是如何掌握、运用ASP的;多学善于关注别人，向同学老师多多学习，不论知识的大小;多思则是要将学到的知识灵活运用。

谁可相欹 发表于 2015-3-7 01:41:00

它可通过内置的组件实现更强大的功能，如使用A-DO可以轻松地访问数据库。

再现理想 发表于 2015-3-14 06:28:59

下载一个源代码，然后再下载一个VBScript帮助，在源代码中遇到不认识的函数或是其他什么程序，都可以查帮助进行解决，这样学习效率很高。

第二个灵魂 发表于 2015-3-21 01:07:02

ASP.Net和ASP的最大区别在于编程思维的转换，而不仅仅在于功能的增强。ASP使用VBS/JS这样的脚本语言混合html来编程，而那些脚本语言属于弱类型、面向结构的编程语言，而非面向对象，这就明显产生以下几个问题：

页: [1]

仓酷云's Archiver

ASP编程：ASP最新SQL防注进过滤涵数