%
'==============
'中国民生银行
'==============
dim MQ_NoSqlHack_AllStr,MQ_NoSqlHack_ComeUrlGet,MQ_NoSqlHack_ComeUrlPost,MQ_NoSqlHack_Str,MQ_NoSqlHack_Get,MQ_NoSqlHack_i,MQ_NoSqlHack_Post
MQ_NoSqlHack_AllStr="select|>|<|'|;|*|and |exec |insert |select |delete |update |count |master |truncate |declare |and |exec |insert |select |delete |update |count |master |truncate |declare |char(|mid(|chr(|and[|exec[|insert[|select[|delete[|update[|count[|master[|truncate[|declare[|set[|set |set |where[|where |where "
MQ_NoSqlHack_ComeUrlGet = Request.QueryString
MQ_NoSqlHack_ComeUrlPost = Request.Form
MQ_NoSqlHack_Str = Split(MQ_NoSqlHack_AllStr,"|")
'Post
If MQ_NoSqlHack_ComeUrlPost<>"" then
For Each MQ_NoSqlHack_Post In Request.Form
For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str)
If Instr(LCase(Request.Form(MQ_NoSqlHack_Post)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then
Response.Write("")
Response.End
End if
Next
Next
End if
'Get
If MQ_NoSqlHack_ComeUrlGet<>"" then
For Each MQ_NoSqlHack_Get In Request.QueryString
For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str)
If Instr(LCase(Request.QueryString(MQ_NoSqlHack_Get)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then
Response.Write("")
Response.End
End if
Next
Next
End if
%>