黑熊的部落格

if sDataPath=sDataPathCheck AND sdo="" then
   UrlRedirect("?Game=biyima&do=setup")
end if


if sDataPath=sDataPathCheck then '如果数据库路径未改
   newDataPath="biyima-#-"&md5(now)&".aspx" '新数据库名称为biyima-#-加安装时间的MD5值.aspx

function LevelLight(tValue)
  if cint(tValue)>sLevelLight then
       LevelLight="<font color='red'>"&tValue&"</font>"
  else
       LevelLight=tValue
  end if
end function

'======================================== 防SQL注入(高效精简版，可还原) =========
function CheckSQL(theCode)
   if theCode<>"" then
   theCode=trim(theCode) '过滤左右空格
   theCode=replace(theCode,"-","{$line$}")
   theCode=replace(theCode,"%","{$percent$}") '防编码
   theCode=replace(theCode,"&","{$AndCode$}") '防编码
   theCode=replace(theCode,"and","{$an.d$}")
   theCode=replace(theCode,"or","{$o.r$}")
   theCode=replace(theCode,"insert","{$inser.t$}")
   theCode=replace(theCode,"update","{$updat.e$}")
   theCode=replace(theCode,"select","{$selec.t$}")
   theCode=replace(theCode,"execute","{$execut.e$}") '防一句话木马 %execute request("value")%
   theCode=replace(theCode,"eval","{$eva.l$}") '防一句话木马  JSCRIPT的eval
   theCode=replace(theCode,"'","&#39;")
   end if
   CheckSQL=theCode
end function
'======================================== 编码还原 =========
function ClearHTML(theCode)
   if theCode<>"" then
   theCode=replace(theCode,"<","&lt;")
   theCode=replace(theCode,"{$line$}","-")
   theCode=replace(theCode,"{$percent$}","%")
   theCode=replace(theCode,"{$AndCode$}","&")
   theCode=replace(theCode,"{$an.d$}","and")
   theCode=replace(theCode,"{$o.r$}","or")
   theCode=replace(theCode,"{$inser.t$}","insert")
   theCode=replace(theCode,"{$updat.e$}","update")
   theCode=replace(theCode,"{$selec.t$}","select")
   theCode=replace(theCode,"{$execut.e$}","execute")
   theCode=replace(theCode,"{$eva.l$}","eval")
   end if
   response.Write(theCode)
end function