On Error Resume Next Fy_Url=Request.ServerVariables("QUERY_STRING") Fy_a=split(Fy_Url,"") redim Fy_Cs(ubound(Fy_a)) On Error Resume Next for Fy_x=0 to ubound(Fy_a) Fy_Cs(Fy_x) = left(Fy_a(Fy_x),instr(Fy_a(Fy_x),"=")-1) Next For Fy_x=0 to ubound(Fy_Cs) If Fy_Cs(Fy_x)>"" Then If Instr(LCase(Request(Fy_Cs(Fy_x))),"'")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"and")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"select")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"update")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"chr")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"delete%20from")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),";")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"insert")>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"mid")>0 Or Instr(LCase(Request(Fy_Cs(Fy_x))),"master.")>0 Then Select Case Fy_Cl Case "1" Response.Write "Script Language=JavaScript>alert(' 出現錯誤！參數 "Fy_Cs(Fy_x)" 的值中包含非法字符串！\n\n 請不要在參數中出現：;,and,select,update,insert,delete,chr 等非法字符！\n\n你想干嗎！不要做無聊的事情！謝謝！');window.close();/Script>" Case "2" Response.Write "Script Language=JavaScript>location.href='"Fy_Zx"'/Script>" Case "3" Response.Write "Script Language=JavaScript>alert(' 出現錯誤！參數 "Fy_Cs(Fy_x)"的值中包含非法字符串！\n\n 請不要在參數中出現：;,and,select,update,insert,delete,chr 等非法字符！\n\n你想干嗎！不要做無聊的事情！謝謝！');location.href='"Fy_Zx"';/Script>" End Select Response.End End If End If Next %>
