home *** CD-ROM | disk | FTP | other *** search
/ 221.214.14.186 / 221.214.14.186.tar / 221.214.14.186 / wh / qim / Ft_sqlin.asp < prev    next >
Text File  |  2006-06-01  |  4KB  |  109 lines
  1. <%
  2. '==================================
  3. '=╬─ ╝■ ├√ú║Ft_sqlin.asp
  4. '=╩╩╙├░µ▒╛ú║FeitecCMS AC V1.3 Free
  5. '=╣ª    ─▄ú║SQL╖└╫ó╚δ│╠╨≥
  6. '=╫≈    ╒▀ú║╙Ω│╟[From to FeitecStudio]
  7. '=╨▐    ╕─ú║╙Ω│╟íóHOHOú¿╠φ╝╙╦°╢¿╥╗╕÷IP╓╗╝╙╥╗╠⌡╝╟┬╝╣ª─▄ú⌐
  8. '=╚╒    ╞┌ú║2006-2-19 18:09
  9. '=░µ    ╚¿ú║http://www.feitec.com/
  10. '=╝╝╩⌡╠╓┬█ú║6602510íó14040543ú¿╨┬╩╓╚║ú⌐
  11. '==================================
  12. '--------╢¿╥σ▓┐╖▌------------------
  13. Dim Ft_Post,Ft_Get,Ft_In,Ft_Inf,Ft_Xh,Ft_db,Ft_dbstr,Kill_IP,WriteSql
  14. '╫╘╢¿╥σ╨Φ╥¬╣²┬╦╡─╫╓┤«,╙├ "|" ╖╓╕⌠
  15. Ft_In = "'|;|and|(|)|exec|insert|select|delete|update|count|*|%|chr|mid|truncate|char|declare"
  16. Kill_IP=True
  17. WriteSql=True
  18. Ft_Inf = split(Ft_In,"|")
  19. '--------POST▓┐╖▌------------------
  20. If Request.Form<>"" Then
  21.     For Each Ft_Post In Request.Form
  22.         For Ft_Xh=0 To Ubound(Ft_Inf)
  23.             If Instr(LCase(Request.Form(Ft_Post)),Ft_Inf(Ft_Xh))<>0 Then
  24.                 If WriteSql=True Then
  25.                     sql="select * from Ft_SqlIn where Sqlin_IP='" & Request.ServerVariables("REMOTE_ADDR") & "' and kill_ip=true" '2005-11-21 Updated
  26.                     set rs=server.createobject("adodb.recordset")
  27.                     rs.open sql,conn,1,3
  28.                     if rs.eof or rs.bof then '2005-11-21 Updated
  29.                         rs.addnew
  30.                         rs("Sqlin_IP")=Request.ServerVariables("REMOTE_ADDR")
  31.                         rs("SqlIn_Web")=Request.ServerVariables("URL")
  32.                         rs("SqlIn_FS")="POST"
  33.                         rs("SqlIn_CS")=Ft_Post
  34.                         rs("SqlIn_SJ")=replace(Request.Form(Ft_Post),"'","''")
  35.                         if sqlin_ok=2 then '┤≥┐¬╖└╫ó╣ª─▄╡½▓╗╦°╢¿IP
  36.                             rs("Kill_ip")=False
  37.                         else
  38.                             rs("Kill_ip")=False '╧╡═│─¼╚╧▓╗╦°╢¿POST╠ß╜╗
  39.                         end if
  40.                         rs.update
  41.                         rs.close:set rs=nothing
  42.                     End If
  43.                     Response.Write "<Script Language=JavaScript>alert('╟δ▓╗╥¬╘┌▓╬╩²╓╨░ⁿ║¼╖╟╖¿╫╓╖√│ó╩╘╫ó╚δúí');</Script>"
  44.                     Response.Write "╖╟╖¿▓┘╫≈úí╧╡═│╫÷┴╦╚τ╧┬╝╟┬╝í²<br>"
  45.                     Response.Write "▓┘╫≈ú╔ú╨ú║"&Request.ServerVariables("REMOTE_ADDR")&"<br>"
  46.                     Response.Write "▓┘╫≈╩▒╝Σú║"&Now&"<br>"
  47.                     Response.Write "▓┘╫≈╥│├µú║"&Request.ServerVariables("URL")&"<br>"
  48.                     Response.Write "╠ß╜╗╖╜╩╜ú║ú╨ú╧ú╙ú╘<br>"
  49.                     Response.Write "╠ß╜╗▓╬╩²ú║"&Ft_Post&"<br>"
  50.                     Response.Write "╠ß╜╗╩²╛▌ú║"&Request.Form(Ft_Post)
  51.                     Response.End
  52.                 End If
  53.             End If
  54.         Next
  55.     Next
  56. End If
  57. '----------------------------------
  58. '--------GET▓┐╖▌-------------------
  59. If Request.QueryString<>"" Then
  60.     For Each Ft_Get In Request.QueryString
  61.         For Ft_Xh=0 To Ubound(Ft_Inf)
  62.             If Instr(replace(LCase(Request.QueryString(Ft_Get)),"<br><li>",""),Ft_Inf(Ft_Xh))<>0 Then
  63.                 If WriteSql=True Then
  64.                     sql="select * from Ft_SqlIn where Sqlin_IP='" & Request.ServerVariables("REMOTE_ADDR") & "' and kill_ip=true" '2005-11-21 Updated
  65.                     set rs=server.createobject("adodb.recordset")
  66.                     rs.open sql,conn,1,3
  67.                     if rs.eof or rs.bof then '2005-11-21 Updated
  68.                         rs.addnew
  69.                         rs("Sqlin_IP")=Request.ServerVariables("REMOTE_ADDR")
  70.                         rs("SqlIn_Web")=Request.ServerVariables("URL")
  71.                         rs("SqlIn_FS")="GET"
  72.                         rs("SqlIn_CS")=Ft_Get
  73.                                                                                         rs("SqlIn_SJ")=replace(Request.QueryString(Ft_Get),"'","''")
  74.                         if sqlin_ok=2 then '┤≥┐¬╖└╫ó╣ª─▄╡½▓╗╦°╢¿IP
  75.                             rs("Kill_ip")=False
  76.                         else
  77.                             rs("Kill_ip")=True
  78.                         end if
  79.                         rs.update
  80.                         rs.close:set rs=nothing
  81.                     End If
  82.                     Response.Write "<Script Language=JavaScript>alert('╟δ▓╗╥¬╘┌▓╬╩²╓╨░ⁿ║¼╖╟╖¿╫╓╖√│ó╩╘╫ó╚δúí');</Script>"
  83.                     Response.Write "╖╟╖¿▓┘╫≈úí╧╡═│╫÷┴╦╚τ╧┬╝╟┬╝í²<br>"
  84.                     Response.Write "▓┘╫≈ú╔ú╨ú║"&Request.ServerVariables("REMOTE_ADDR")&"<br>"
  85.                     Response.Write "▓┘╫≈╩▒╝Σú║"&Now&"<br>"
  86.                     Response.Write "▓┘╫≈╥│├µú║"&Request.ServerVariables("URL")&"<br>"
  87.                     Response.Write "╠ß╜╗╖╜╩╜ú║ú╟ú┼ú╘<br>"
  88.                     Response.Write "╠ß╜╗▓╬╩²ú║"&Ft_Get&"<br>"
  89.                     Response.Write "╠ß╜╗╩²╛▌ú║"&Request.QueryString(Ft_Get)
  90.                     Response.End
  91.                 End If
  92.             End If
  93.         Next
  94.     Next
  95. End If
  96.  
  97. If Kill_IP=True Then
  98.     Dim cur_IP,rsKill_IP,Kill_IPsql
  99.     cur_IP=Request.ServerVariables("REMOTE_ADDR")
  100.     Kill_IPsql="select Sqlin_IP from Ft_SqlIn where Sqlin_IP='"&cur_IP&"' and kill_ip=true"
  101.     set rsKill_IP=server.createobject("adodb.recordset")
  102.     rsKill_IP.open Kill_IPsql,conn,1,1
  103.     If Not(rsKill_IP.eof or rsKill_IP.bof) Then
  104.         Response.write "<Script Language=JavaScript>alert('─π╡─Ip╥╤╛¡▒╗▒╛╧╡═│╫╘╢»╦°╢¿úí\n\n╚τ╧δ╖├╬╩▒╛╒╛╟δ║═╣▄└φ╘▒┴¬╧╡úí╣▄└φ╘▒╙╩╧Σú║"&webemail&"\n\n            ["&webname&"]');</Script>"
  105.         Response.End
  106.     End If
  107.     rsKill_IP.close:set rsKill_IP=nothing
  108. End If
  109. %>