asp防注入函数

<%'注入漏洞数值型参数检测

sub checkimmit(x)

    if not IsNumeric(x) then response.Redirect "error.htm"

end sub

%>

<%'注入漏洞字符型参数检测

sub checkimmit(x)

    If (InStr(x,"&",1)<>0 or InStr(x,"=",1)<>0 or InStr(x,"select ",1)<>0) then Response.Redirect "Error.htm"

end sub

%>