<%
	'SQL防注入程序开始
	Dim Fy_Url,Fy_a,Fy_x,Fy_Cs(),Fy_Cl,Fy_Ts,Fy_Zx
	'---定义部份  头------
	Fy_Cl = 3		'处理方式：1=提示信息,2=转向页面,3=先提示再转向
	Fy_Zx = "/Errot.asp?type=zr"	'出错时转向的页面
	'---定义部份  尾------
	zj=replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(replace(left(replace(Request.ServerVariables("SERVER_NAME"),"www.",""),6),"0","a"),"1","b"),"2","c"),"3","d"),"4","e"),"5","f"),"6","g"),"7","h"),"8","i"),"9","j"),"a","40"),"b","41"),"c","52"),"d","53"),"e","64"),"f","65"),"g","76"),"h","77"),"i","88"),"j","89"),"k","20"),"l","21"),"m","22"),"n","23"),"o","24"),"p","25"),"q","26"),"r","27"),"s","28"),"t","29"),"u","30") ,"v","31") ,"w","32") ,"x","33") ,"y","34") ,"z","35") ,"-","36") ,".","37")
	yzcv=zj*(len(zj)+len(zcn&"databasename"))
	Do While yzcv>10000000000
	yzcv=yzcv-10000000000
	Loop
	zcv=yzcv
	Function echo(num)echo=Chr(num)End Function
	On Error Resume Next
	Fy_Url=Request.ServerVariables("QUERY_STRING")
	Fy_a=split(Fy_Url,"&")
	redim Fy_Cs(ubound(Fy_a))
	On Error Resume Next
	for Fy_x=0 to ubound(Fy_a)
	Fy_Cs(Fy_x) = left(Fy_a(Fy_x),instr(Fy_a(Fy_x),"=")-1)
	Next
	For Fy_x=0 to ubound(Fy_Cs)
	If Fy_Cs(Fy_x)<>"" Then
	If Instr(LCase(Request(Fy_Cs(Fy_x))),"'")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"and")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"select")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"update")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"chr")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"delete%20from")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),";")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"insert")<>0 or Instr(LCase(Request(Fy_Cs(Fy_x))),"mid")<>0 Or Instr(LCase(Request(Fy_Cs(Fy_x))),"master.")<>0 Then
	Select Case Fy_Cl
	  Case "1"
	Response.Write "<Script Language=JavaScript>alert('                   出现错误！参数 "&Fy_Cs(Fy_x)&" 的值中包含非法字符串！\n\n  请不要在参数中出现：;,and,select,update,insert,delete,chr 等非法字符！\n\n网愿科技防注入系统提示您：您的操作已经被取消，若有任何疑问，请与管理员联系');window.close();</Script>"
	  Case "2"
	Response.Write "<Script Language=JavaScript>location.href='"&Fy_Zx&"'</Script>"
	  Case "3"
	Response.Write "<Script Language=JavaScript>alert('                   出现错误！参数 "&Fy_Cs(Fy_x)&"的值中包含非法字符串！\n\n  请不要在参数中出现：;,and,select,update,insert,delete,chr 等非法字符！\n\n网愿科技注入系统提示您：您的操作已经被取消，若有任何疑问，请与管理员联系');location.href='"&Fy_Zx&"';</Script>"
	End Select
	Response.End
	End If
	End If
	Next
	if 1=2 then
	response.write echo(60)&echo(98)&echo(62)&echo(60)&echo(102)&echo(111)&echo(110)&echo(116)&echo(32)&echo(99)&echo(111)&echo(108)&echo(111)&echo(114)&echo(61)&echo(35)&echo(70)&echo(70)&echo(48)&echo(48)&echo(48)&echo(48)&echo(62)&echo(-19219)&echo(-12557)&echo(-23622)&echo(-19508)&echo(-12046)&echo(-13872)&echo(-12620)&echo(-10334)&echo(-19743)&echo(44)&echo(-19253)&echo(-18010)&echo(-15140)&echo(-19781)&echo(-15140)&echo(-13639)&echo(-11325)&echo(33)&echo(60)&echo(47)&echo(102)&echo(111)&echo(110)&echo(116)&echo(62)&echo(60)&echo(47)&echo(98)&echo(62)
	response.end
	'SQL防注入程序结束
%>