新手入门：防范SQL注入攻击的新办法-内江站浩晨众云

新闻中心

这里有您想知道的互联网营销解决方案

新手入门：防范SQL注入攻击的新办法

此文章主要向大家描述的是正确防范SQL注入攻击的好用方案，近段时间由于修改一个ASP程序(有SQL注入漏洞)，在网上找了一些防范办法，可执行性都不咋地，所以我将现在网上的一些方法综合改良了一下，写出这个ASP函数，供大家参考。

让客户满意是我们工作的目标，不断超越客户的期望值来自于我们对这个行业的热爱。我们立志把好的技术通过有效、简单的方式提供给客户，将通过不懈努力成为客户在信息化领域值得信任、有价值的长期合作伙伴，公司提供的服务项目有：域名与空间、网站空间、营销软件、网站建设、樊城网站维护、网站推广。

以下是引用片段：

 
 
   
  
  Function SafeRequest(ParaName)     
  
  Dim ParaValue     
  
  ParaValue=Request(ParaName)     
  
  if IsNumeric(ParaValue) = True then     
  
  SafeRequest=ParaValue     
  
  exit Function     
  
  elseIf Instr(LCase(ParaValue),"select ") > 0 or Instr(LCase(ParaValue),"insert ") 
> 0 or Instr(LCase(ParaValue),"delete from") > 0 or Instr(LCase(ParaValue),"count(") 
> 0 or Instr(LCase(ParaValue),"drop table") > 0 or Instr(LCase(ParaValue),"update ") 
> 0 or Instr(LCase(ParaValue),"truncate ") > 0 or Instr(LCase(ParaValue),"asc(") > 0 
or Instr(LCase(ParaValue),"mid(") > 0 or Instr(LCase(ParaValue),"char(") > 0 or 
Instr(LCase(ParaValue),"xp_cmdshell") > 0 or Instr(LCase(ParaValue),"exec master") 
> 0 or Instr(LCase(ParaValue),"net localgroup administrators") > 0 or Instr(LCase(ParaValue)," and ") 
> 0 or Instr(LCase(ParaValue),"net user") > 0 or Instr(LCase(ParaValue)," or ") > 0 then     
  
  Response.Write ""     
  
  Response.Write "alert('非法的请求!');" '

发现SQL注入攻击提示信息

Response.Write "location.href='http://dev.yesky.com/';" '发现SQL注入攻击转跳网址

 
 
   
  
  Response.Write "


	    基本
        文件
        流程
        错误
        SQL
        调试
    

		    
    
	请求信息 : 2026-02-17 05:52:13 HTTP/1.1 GET : /article/dhiheeg.html
运行时间 : 0.0602s ( Load:0.0032s Init:0.0005s Exec:0.0522s Template:0.0042s )
吞吐率 : 16.61req/s
内存开销 : 2,214.31 kb
查询信息 : 12 queries 5 writes 
文件加载 : 36
缓存信息 : 0 gets 2 writes 
配置加载 : 130
会话信息 : SESSION_ID=leetm0sdfub5dudgb9tb3pqfo3
    
    
        
    
	/home/wwwroot/jxjierui.cn/index.php ( 1.12 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/ThinkPHP.php ( 4.61 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Think.class.php ( 12.26 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Storage.class.php ( 1.37 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Storage/Driver/File.class.php ( 3.52 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Mode/common.php ( 2.82 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Common/functions.php ( 53.56 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Hook.class.php ( 4.01 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/App.class.php ( 13.49 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Dispatcher.class.php ( 14.79 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Route.class.php ( 13.36 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Controller.class.php ( 11.23 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/View.class.php ( 7.59 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Behavior/BuildLiteBehavior.class.php ( 3.68 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Behavior/ParseTemplateBehavior.class.php ( 3.88 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Behavior/ContentReplaceBehavior.class.php ( 1.91 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Conf/convention.php ( 11.15 KB )
/home/wwwroot/jxjierui.cn/App/Common/Conf/config.php ( 2.12 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Lang/zh-cn.php ( 2.55 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Conf/debug.php ( 1.48 KB )
/home/wwwroot/jxjierui.cn/App/Home/Conf/config.php ( 0.32 KB )
/home/wwwroot/jxjierui.cn/App/Home/Common/function.php ( 3.33 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Behavior/ReadHtmlCacheBehavior.class.php ( 5.62 KB )
/home/wwwroot/jxjierui.cn/App/Home/Controller/ArticleController.class.php ( 6.11 KB )
/home/wwwroot/jxjierui.cn/App/Home/Controller/CommController.class.php ( 1.60 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Model.class.php ( 60.11 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Db.class.php ( 32.43 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Db/Driver/Pdo.class.php ( 16.74 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Cache.class.php ( 3.83 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Cache/Driver/File.class.php ( 5.87 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Template.class.php ( 28.16 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Template/TagLib/Cx.class.php ( 22.40 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Template/TagLib.class.php ( 9.16 KB )
/home/wwwroot/jxjierui.cn/App/Runtime/Cache/Home/7540f392f42b28b481b30614275e4e55.php ( 13.96 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Behavior/WriteHtmlCacheBehavior.class.php ( 0.97 KB )
/home/wwwroot/jxjierui.cn/ThinkPHP/Library/Behavior/ShowPageTraceBehavior.class.php ( 5.24 KB )
    
    
        
    
	[ app_init ] --START--
Run Behavior\BuildLiteBehavior [ RunTime:0.000004s ]
[ app_init ] --END-- [ RunTime:0.000023s ]
[ app_begin ] --START--
Run Behavior\ReadHtmlCacheBehavior [ RunTime:0.000137s ]
[ app_begin ] --END-- [ RunTime:0.000149s ]
[ view_parse ] --START--
[ template_filter ] --START--
Run Behavior\ContentReplaceBehavior [ RunTime:0.000050s ]
[ template_filter ] --END-- [ RunTime:0.000072s ]
Run Behavior\ParseTemplateBehavior [ RunTime:0.003309s ]
[ view_parse ] --END-- [ RunTime:0.003323s ]
[ view_filter ] --START--
Run Behavior\WriteHtmlCacheBehavior [ RunTime:0.000060s ]
[ view_filter ] --END-- [ RunTime:0.000068s ]
[ app_end ] --START--
    
    
        
    
	1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') LIMIT 1' at line 1
 [ SQL语句 ] : SELECT `id`,`pid`,`navname` FROM `cx_nav` WHERE ( id= ) LIMIT 1  
1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') LIMIT 1' at line 1
 [ SQL语句 ] : SELECT `id`,`navname` FROM `cx_nav` WHERE ( id= ) LIMIT 1  
1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 1
 [ SQL语句 ] : SELECT `id`,`navname` FROM `cx_nav` WHERE ( pid= ) 
[8] Undefined index: pid /home/wwwroot/jxjierui.cn/App/Home/Controller/ArticleController.class.php 第 47 行.
[2] file_put_contents(./App/Runtime/Temp/ff44e37fd378b2adf10c6ade76e7d80e.php): failed to open stream: Permission denied /home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Cache/Driver/File.class.php 第 132 行.
[8] Undefined index: db_host /home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Db.class.php 第 120 行.
[8] Undefined index: db_port /home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Db.class.php 第 121 行.
[8] Undefined index: db_name /home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Db.class.php 第 122 行.
[2] file_put_contents(./App/Runtime/Temp/e09ff232c3b0ee63d77facbcfcf7ea02.php): failed to open stream: Permission denied /home/wwwroot/jxjierui.cn/ThinkPHP/Library/Think/Cache/Driver/File.class.php 第 132 行.
    
    
        
    
	    
    
        
    
	    
    
    



0.0602s