禁止站外提交參數測試代碼

<%
if request("action")="add" then
if CheckWebSitePage=true then
response.Write("檢測通過")
else
response.Write("檢測不通過")
Response.end
end if
end if

Function CheckWebSitePage()
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
response.Write("<br>上一頁面地址"&server_v1)
response.Write("<br>伺服器位址"&server_v2)
response.Write("<br>"&mid(server_v1,8,len(server_v2)))

if  mid(server_v1,8,len(server_v2))<>server_v2  then
CheckWebSitePage=false
else
CheckWebSitePage=true
end if

End Function

%> 
<p align="center">
<form id="form1" name="form1" method="post" action="?action=add">
  <label>
  <input type="submit" name="Submit" value="Submit" />
  </label>
</form>
</p>