武汉青山区黑帮人物:关于ASP连接数据库问题

来源:百度文库 编辑:杭州交通信息网 时间:2024/04/30 02:30:54
<%
dim sql_injdata
SQL_injdata="'|'|and|exec|insert|select|update|count|%|chr|mid|master|truncate|char|declare"
SQL_inj = split(SQL_Injdata,"|")
If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then
Response.Write "<Script Language=JavaScript>alert('非法参数!');history.back(-1)</Script>"
Response.end
end if
next
Next
End If

dim startime,endtime
dim conn,dbpath,UserIP
On Error Resume Next
set conn=server.createobject("adodb.connection")
DBPath = Server.MapPath("database/database.mdb")
conn.Open "Provider=SQLOLEDB.4.0;Data Source=" & DBPath
'老数据库请用下面的代码替换上面的
set rs=server.createobject("adodb.recordset")
UserIP=Request.ServerVariables("REMOTE_ADDR")
sql="select * from killip"
rs.open sql,conn,1,3
i=0
if not rs.EOF then
do while not rs.eof
i=i+1
if rs("ip")=UserIP then
rs.Close
set rs=nothing
conn.close
set conn=nothing
Response.Redirect "error.asp?id=003"
Response.End
exit do
end if
rs.MoveNext
loop
end if
rs.Close
set rs=nothing
%>
我想把连接ACCESS改成SQL
set conn=server.createobject("adodb.connection")
DBPath = Server.MapPath("database/database.mdb")
conn.Open "Provider=SQLOLEDB.4.0;Data Source=" & DBPath

代码如下

dim conn,DBPath
set conn=server.createobject("ADODB.connection")
con.open "PROVIDER=SQLOLEDB;DATA
SOURCE=SQL服务器名称或IP地址;UID=sa;PWD=数据库密码;DATABASE=数据库名称

一打开网页之后就会出错!
会连接到error.asp?id=003这个页面
dim conn,DBPath
set conn=server.createobject("ADODB.connection")
conn.open "PROVIDER=SQLOLEDB;DATA
SOURCE=SQL服务器名称或IP地址;UID=sa;PWD=数据库密码;DATABASE=数据库名称

怎么改啊?

晕,这个未必有点让人可怕吧。。