Code release! Two small functions make your ASP program immune to SQL injection!

Source: Internet
Author: User
Tags chr sql injection
Rem # Long integer conversion
Function toNum (s, default)
If IsNumeric (s) and s <> "then
ToNum = CLng (s)
Else
ToNum = default
End If
End Function

Rem # SQL statement conversion
Function toSql (str)
If IsNull (str) Then str = ""
ToSql = replace (str ,"'","''")
End Function

Example:
Dim SQL
Dim strWhere, strName, intAge
StrName = toSql (request ("user "))
IntAge = toNum (request ("age"), 20)
SQL = "SELECT * FROM [USER]" & _
"WHERE [AGE]>" & strName &_
"AND [USERNAME] = '" & intAge &"'"
In general, the above two functions can be used to prevent online SQL injection attacks! If you need it, you can replace chr (0) and change the toSql function as follows:
Function toSql (str)
If IsNull (str) Then str = ""
Str = replace (str, chr (0 ),"")
ToSql = replace (str ,"'","''")
End Function
Note:
**************************************** *******************************
Checks externally submitted functions.
Function CheckUrlRefer ()
Dim strLocalUrl, intUrlLen, strUrlRefer
StrLocalUrl = "http: // 127.0.0.1"
IntUrlLen = Len (strLocalUrl)
StrUrlRefer = LCase (request. ServerVariables ("HTTP_REFERER ")&"")
'Check whether the previous page is from strLocalUrl
If Left (strUrlRefer, intUrlLen) = strLocalUrl Then
CheckUrlRefer = True
Else
CheckUrlRefer = False
End If
End Function
**************************************** *******************************
This function can help you resist external SQL injection tests. You only need to call this function in the header of the page.
Related Article

E-Commerce Solutions

Leverage the same tools powering the Alibaba Ecosystem

Learn more >

Apsara Conference 2019

The Rise of Data Intelligence, September 25th - 27th, Hangzhou, China

Learn more >

Alibaba Cloud Free Trial

Learn and experience the power of Alibaba Cloud with a free trial worth $300-1200 USD

Learn more >

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.