Dernière fonction de filtrage anti-injection SQL ASP
Auteur：Eve Cole
Date de mise à jour：2009-06-25 17:44:59
fonction checkstr(str)
si est nul (str) alors
checkstr = ""
fonction de sortie
finir si
str = remplacer(str,chr(0),"", 1, －1, 1)
str = remplacer(str, """", """, 1, －1, 1)
str = remplacer(str,"<；","<；", 1, －1, 1)
str = remplacer(str,">；",">；", 1, －1, 1)
str = remplacer (str, "script", "script", 1, －1, 0)
str = remplacer (str, "script", "script", 1, －1, 0)
str = remplacer (str, "script", "script", 1, －1, 0)
str = remplacer (str, "script", "script", 1, －1, 1)
str = remplacer (str, "objet", "objet", 1, －1, 0)
str = remplacer (str, "objet", "objet", 1, －1, 0)
str = remplacer (str, "objet", "objet", 1, －1, 0)
str = remplacer (str, "objet", "objet", 1, －1, 1)
str = remplacer (str, "applet", "applet", 1, －1, 0)
str = remplacer (str, "applet", "applet", 1, －1, 0)
str = remplacer (str, "applet", "applet", 1, －1, 0)
str = remplacer (str, "applet", "applet", 1, －1, 1)
str = remplacer(str, "[", "[")
str = remplacer(str, "]", "]")
str = remplacer(str, """", "", 1, －1, 1)
str = remplacer (str, "=", "=", 1, －1, 1)
str = remplacer (str, "'", "''", 1, －1, 1)
str = remplacer (str, "select", "select", 1, －1, 1)
str = remplacer (str, "exécuter", "exécuter", 1, －1, 1)
str = remplacer (str, "exec", "exec", 1, －1, 1)
str = remplacer (str, "rejoindre", "rejoindre", 1, －1, 1)
str = remplacer (str, "union", "union", 1, －1, 1)
str = remplacer (str, "où", "où", 1, －1, 1)
str = remplacer (str, "insérer", "insérer", 1, －1, 1)
str = remplacer (str, "supprimer", "supprimer", 1, －1, 1)
str = remplacer (str, "mettre à jour", "mettre à jour", 1, －1, 1)
str = remplacer (str, "j'aime", "j'aime", 1, －1, 1)
str = remplacer (str, "drop", "drop", 1, －1, 1)
str = remplacer (str, "créer", "créer", 1, －1, 1)
str = remplacer (str, "renommer", "renommer", 1, －1, 1)
str = remplacer (str, "count", "count", 1, －1, 1)
str = remplacer (str, "chr", "chr", 1, －1, 1)
str = remplacer (str, "mid", "mid", 1, －1, 1)
str = remplacer (str, "tronquer", "tronquer", 1, －1, 1)
str = remplacer (str, "nchar", "nchar", 1, －1, 1)
str = remplacer (str, "char", "char", 1, －1, 1)
str = remplacer (str, "alter", "alter", 1, －1, 1)
str = remplacer (str, "cast", "cast", 1, －1, 1)
str = remplacer (str, "existe", "existe", 1, －1, 1)
str = remplacer(str,chr(13),"<；br>；", 1, －1, 1)
checkstr = remplacer(str,"'","''", 1, －1, 1)
fonction de fin
