ASP安全檢測與過濾函數(shù)SafeCheck

1、    CheckString=Replace(CheckString,"'","'")select case CheckTypecase 0 CheckString=trim(CheckString) SafeCheck=Left(CheckString,CheckLength)case 1 if not isnumberic(CheckString) then  SafeCheck=ErrorRoot&"00002" 

2、 exit function else  SafeCheck=Left(CheckString,CheckLength) end ifcase 2 tempVar=IsDate(CheckString) if Not TempVar then  SafeCheck=ErrorRoot&"00003"  exit function else  select case CheckLength  case 0   SafeCheck=FormatDate

3、Time(CheckString,vbShortDate)  case 1   SafeCheck=FormatDateTime(CheckString,vbLongDate)  case 2   SafeCheck=CheckString  end select end ifcase 3 tempVar=FormatCurrency(CheckString,0) if Err then  SafeCheck=ErrorRoot&"00004" 

4、exit function else  SafeCheck=FormatCurrency(CheckString,CheckLength) end ifcase 4 sTemp = CheckString If IsNull(sTemp) = True Then  SafeCheck=ErrorRoot&"00005"  Exit Function End If sTemp = Replace(sTemp, "&", "&"

5、;) sTemp = Replace(sTemp, "<", "<") sTemp = Replace(sTemp, ">", ">") sTemp = Replace(sTemp, Chr(34), """) sTemp = Replace(sTemp, Chr(10), "<br>") SafeCheck = Left(sTemp,CheckLength)case 5 

6、;sTemp = CheckString If IsNull(sTemp) = True Then  SafeCheck=ErrorRoot&"00006"  Exit Function End If sTemp = Replace(sTemp, "&", "&") sTemp = Replace(sTemp, "<", "<") sTemp = Replace(sTemp, "&

7、gt;", ">") sTemp = Replace(sTemp, """, Chr(34) sTemp = Replace(sTemp, "<br>",Chr(10) SafeCheck = Left(sTemp,CheckLength)case 6 s_BadStr = "' &<>?%,;:()'!#$*|+-=" & Chr(34) & Chr(9) & Chr(32)&

8、#160;n = Len(s_BadStr) IsSafeStr = True For i = 1 To n  If Instr(CheckString, Mid(s_BadStr, i, 1) > 0 Then   IsSafeStr = False  End If Next if IsSafeStr then  SafeCheck=left(CheckString,CheckLength) else  SafeCheck=ErrorRoot&"00007&q

9、uot;  Exit Function end ifcase 7 s_Filter="net user|xp_cmdshell|/add|select|count|asc|char|mid|'|""|" S_Filter=S_Filter&"insert|delete|drop|truncate|from|%|declare|-" S_Filters=split(S_Filter,"|") isFound=false for i=0 to ubound(S_Filters)-1  if Instr(lcase(CheckString),lcase(S_Filters(i)<>0 then   isFound=true   exit for  end if next if isFound then