网站被连续注入，疯了，求两个正则一个50分！

function strleach(str)'过滤非法字符函数 dim tempstr if str="" then exit function tempstr=replace(str,chr(34),"")' " tempstr=replace(tempstr,chr(39),"")' ' tempstr=replace(tempstr,chr(60),"")' < tempstr=replace(tempstr,chr(62),"")' > tempstr=replace(tempstr,chr(37),"")' % tempstr=replace(tempstr,chr(38),"")' & tempstr=replace(tempstr,chr(40),"")' ( tempstr=replace(tempstr,chr(41),"")' ) tempstr=replace(tempstr,chr(59),"")' ; tempstr=replace(tempstr,chr(43),"")' + tempstr=replace(tempstr,chr(45),"")' - tempstr=replace(tempstr,chr(91),"")' [ tempstr=replace(tempstr,chr(93),"")' ] tempstr=replace(tempstr,chr(123),"")' { tempstr=replace(tempstr,chr(125),"")' } strleach=tempstr end function

#region检测非法字符，防止sql注入 /**//// <summary> ///检测非法字符，防止sql注入 71/// 如果参数是空，返回false /// 如果参数中包含非法字符，返回false ///// 否则返回 true /// </summary> /// <param name="thePara"></param> /// <returns></returns> public bool toFilter(string thePara) { string[] BadCode = new string[]{ "'", "\"", "exec", "cmd", ">", "<", "and", "=", "\\", ";" }; try { if (CheckNullstr(thePara) == false) //如果参数是空值，返回false { throw new Exception("参数为空"); } else { for (int i = 0; i < BadCode.Length; i++) { if (thePara.IndexOf(BadCode[i]) > 0) { throw new Exception("包含非法字符"); } } } return true; } catch { return false; } } #endregion

Function IsInteger(Para)//设置判断只允许数字,如果不是数字返回假 IsInteger=false If Not (IsNull(Para) Or Trim(Para)="" Or Not IsNumeric(Para)) Then IsInteger=true End If End Function

Function IsInteger(Para)//设置判断只允许数字,如果不是数字返回假 IsInteger=false If (Not IsNull(Para) || Trim(Para)="" || Not IsNumeric(Para))) { IsInteger=true; } End Function //-------------------------------------------------------------- if (IsIntger("参数")!=false) { A=IsIntger("参数");//参数正确就调用 }

加为好友

发送私信

在线聊天

live_7sky
天山寒雪
等级:

发表于：2008-05-09 11:05:0224楼得分:0

插入，修改，删除，查询：

Default 中的查询...
1. WebUtility.SearchRedirect(txtSearch.Text);

namespace PetShop.Web {

    public static class WebUtility {

        private const string REDIRECT_URL = "~/Search.aspx?keywords={0}";


        public static string InputText(string text, int maxLength) {
            text = text.Trim();
            if (string.IsNullOrEmpty(text))
                return string.Empty;
            if (text.Length > maxLength)
                text = text.Substring(0, maxLength);
            text = Regex.Replace(text, "[\\s]{2,}", " "); //two or more spaces
            text = Regex.Replace(text, "( <[b ¦B][r ¦R]/*>)+ ¦( <[p ¦P](. ¦\\n)*?>)", "\n"); // <br>
            text = Regex.Replace(text, "(\\s*&[n ¦N][b ¦B][s ¦S][p ¦P];\\s*)+", " "); // 
            text = Regex.Replace(text, " <(. ¦\\n)*?>", string.Empty); //any other tags
            text = text.Replace("'", "''");
            return text;
        }

public static void SearchRedirect(string key) {
            HttpContext.Current.Response.Redirect(string.Format(REDIRECT_URL, InputText(key, 255)));
        }

    }

/// <summary>
        ///  移除HTMl 标记
        /// </summary>
        /// <param name="Html"> </param>
        /// <param name="RegStr"> </param>
        /// <returns> </returns>
        public static string Remove(string Html)
        {
            string regesstr = " <.*?>";
            return Regex.Replace(Html, regesstr, string.Empty, RegexOptions.IgnoreCase);
        }
        public static string FilterScript(string content)
        {
            string regexstr = @" <(script)[^>]*>(\s* ¦.)* </\1>";
            return Regex.Replace(content,regexstr,string.Empty,RegexOptions.IgnoreCase);

        }
        /// <summary>
        /// 过略所有的危险标记
        /// </summary>
        /// <param name="html"> </param>
        /// <returns> </returns>
        public string wipeScript(string html)
        {
            System.Text.RegularExpressions.Regex regex1 = new System.Text.RegularExpressions.Regex(@"( <script){1,}[^ <>]*>[^\0]*( <\/script>){1,}", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
            System.Text.RegularExpressions.Regex regex2 = new System.Text.RegularExpressions.Regex(@"href   *=   *[\s\S]*script   *:", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
            System.Text.RegularExpressions.Regex regex3 = new System.Text.RegularExpressions.Regex(@"on[\s\S]*=", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
            System.Text.RegularExpressions.Regex regex4 = new System.Text.RegularExpressions.Regex(@" <iframe[\s\S]+ </iframe*>", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
            System.Text.RegularExpressions.Regex regex5 = new System.Text.RegularExpressions.Regex(@" <frameset[\s\S]+ </frameset*>", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
            html = regex1.Replace(html, "");   //过滤 <script> </script>标记
            html = regex2.Replace(html, "");   //过滤href=javascript:   ( <A>)   属性
            html = regex3.Replace(html, "   _disibledevent=");   //过滤其它控件的on...事件
            html = regex4.Replace(html, "");   //过滤iframe
            html = regex5.Replace(html, "");   //过滤frameset
            return html;
        }

修改删除举报引用回复