sql2000数据库防止js挂马设置主要针对public账户设置!

星期五, 十二月 31st, 2010

第一步 选择你的数据库
第二步 打开视图sysconstraints

点击权限

Posted in 饭碗 | No Comments »

屏蔽sql的js挂马办法~

星期五, 十二月 31st, 2010

创建一个触发器，只要有</script>就不给插入，对性能会有点影响
create trigger tr_table_insertupdate
on tablename
for insert,update
as
if exists (
select 1 from inserted
where data like ‘%%’
)
begin
RAISERROR (‘不能修改或者添加‘,16,1);
ROLLBACK TRANSACTION
end
go

Posted in 饭碗 | No Comments »

js获取html网页源码，可能接下来的工程用得到~

星期五, 七月 16th, 2010

<script language=”javascript”>
//上移
function getSource(url){
var dex = url.indexOf(“?”);
if(dex == -1){
url = url + “?timestampt=” + new Date();
} else {
url = url + “&timestampt=” + new Date();
}
send_request(url, callbackGetSource);
}
function callbackGetSource(){
if (http_request.readyState == 4) {
if (http_request.status == 200) {
var t = http_request.responseText
alert(t);
} else { //页面不正常
alert(“您所请求的页面有异常。”);
}
}
}
</script>
<!– ajax –>
<script language=”javascript”>
var http_request = null;
function send_request(url, method) {
http_request = null;
if(window.XMLHttpRequest) { //Mozilla 浏览器
http_request = [...]

Posted in 饭碗 | 12 Comments »