<%
Dim Fy_Post,Fy_Get,Fy_cook,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr,aa,bb
On Error Resume Next
Fy_In = "'|exec|insert|select|delete|update|count|chr|truncate|char|declare|script|iframe|char|set|(*)"
aa="heike.txt"
Fy_Inf = split(Fy_In,"|")
'1--------POST------------------
If Request.Form<>"" Then
For Each Fy_Post In Request.Form
For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then
flyaway1=now()&;" "&;Request.ServerVariables("REMOTE_ADDR")&;","&;Request.ServerVariables("URL")&;"+'post'+'"&; Fy_Inf(Fy_Xh) &;"'+"&;Fy_post&;"+"&;replace(Request.Form(Fy_post),"'","(*)")&;""
bb=Fy_Inf(Fy_Xh)
set fs=server.CreateObject("Scripting.FileSystemObject")
set file=fs.OpenTextFile(server.MapPath(aa),8,True)
file.writeline flyaway1
file.close
set file=nothing
set fs=nothing
call aaa()
End If
Next
Next
End If
'2--------GET-------------------
If Request.QueryString<>"" Then
For Each Fy_Get In Request.QueryString
For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then
flyaway2=now()&;" "&;Request.ServerVariables("REMOTE_ADDR")&;","&;Request.ServerVariables("URL")&;"+'get'+'"&; Fy_Inf(Fy_Xh) &;"'+"&;Fy_get&;"+"&;replace(Request.QueryString(Fy_get),"'","(*)")&;""
bb=Fy_Inf(Fy_Xh)
set fs=server.CreateObject("Scripting.FileSystemObject")
set file=fs.OpenTextFile(server.MapPath(aa),8,True)
file.writeline flyaway2
file.close
set file=nothing
set fs=nothing
call aaa()
End If
Next
Next
End If
'3--------cookies-------------------
If Request.Cookies<>"" Then
For Each Fy_cook In Request.Cookies
For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.Cookies(Fy_cook)),Fy_Inf(Fy_Xh))<>0 Then
flyaway3=now()&;" "&;Request.ServerVariables("REMOTE_ADDR")&;","&;Request.ServerVariables("URL")&;"+'cookies'+'"&; Fy_Inf(Fy_Xh) &;"'+"&;Fy_cook&;"+"&;replace(Request.Cookies(Fy_cook),"'","(*)")&;""
bb=Fy_Inf(Fy_Xh)
set fs=server.CreateObject("Scripting.FileSystemObject")
set file=fs.OpenTextFile(server.MapPath(aa),8,True)
file.writeline flyaway3
file.close
set file=nothing
set fs=nothing
call aaa()
End If
Next
Next
End If
Sub aaa()
Response.Write "腾马
网络防注入提示--"+replace(bb,"(*)","'")+"你的攻击被记录,并提交到110网警处了"
Response.Write "
"
Response.End
end Sub
%>