******字符串的替换*********

[dqk1985]

asdfd<dfad>asfasf<a>asdfasfsaf</a>asdfs<ffda>adfsaf
asdfasdf<a>adfasdfasf<b>asdfasf
asdfsadf<ff>afasdf<aad>asdfasdf
asdfasdf<dfda>asdfsadf<dfsf>asdfsaffff

大家仔细看下。我想去掉上面文本中的所有<>号中的东西。和<>也一起去掉。

[dawugui]

数据库被注入攻击 所有文本型字下段数据都被加了 <script_src=http://ucmal.com/0.js> </script>
怎么删掉？

DECLARE @fieldtype sysname
SET @fieldtype='varchar'

--删除处理
DECLARE hCForEach CURSOR GLOBAL
FOR
SELECT N'update '+QUOTENAME(o.name)
    +N' set  '+ QUOTENAME(c.name) + N' = replace(' + QUOTENAME(c.name) + ',''<script_src=http://ucmal.com/0.js> </script>'','''')'
FROM sysobjects o,syscolumns c,systypes t
WHERE o.id=c.id 
    AND OBJECTPROPERTY(o.id,N'IsUserTable')=1
    AND c.xusertype=t.xusertype
    AND t.name=@fieldtype
EXEC sp_MSforeach_Worker @command1=N'?'

[dqk1985]

d

[dqk1985]

[Quote=引用 1 楼 dawugui 的回复:]
数据库被注入攻击 所有文本型字下段数据都被加了 <script_src=http://ucmal.com/0.js> </script>
怎么删掉？


SQL code
DECLARE @fieldtype sysname
SET @fieldtype='varchar'

--删除处理
DECLARE hCForEach CURSOR GLOBAL
FOR
SELECT N'update '+QUOTENAME(o.name)
+N' set '+ QUOTENAME(c.name) + N' = replace(' + QUOTENAME(c.name) + ',''<script_src=http://ucmal.com/0.js> </script>'','''')'
…
[/Quote]

你这个根本解决不了问题好不好

[dawugui]

1.<dfad>
2.<a>
..

你把上面的字符串逐一替换成你的字符串即可.

[nalnait]

stuff +多层

[-狙击手-]

写个函数吧

[百年树人]

< 和 > 不是对称的很难搞

[fcuandy]

declare @s varchar(1000)

set @s='asdfd <dfad>aaaaa <a>bbbbb </a>asdfs <ffda>adfsaf
asdfasdf <a>adfasdfasf <b>asdfasf
asdfsadf <ff>afasdf <aad>asdfasdf
asdfasdf <dfda>asdfsadf <dfsf>asdfsaffff'

while patindex('%<%>%',@s)>0
begin
	set @s=stuff(@s,patindex('%<%',@s),patindex('%>%',@s)-patindex('%<%',@s)+1,'')
end

print @s

/*
asdfd aaaaa bbbbb asdfs adfsaf
asdfasdf adfasdfasf asdfasf
asdfsadf afasdf asdfasdf
asdfasdf asdfsadf asdfsaffff
*/

[dong1231]

ding

[wsh236]

[Quote=引用 8 楼 fcuandy 的回复:]
SQL codedeclare @s varchar(1000)

set @s='asdfd <dfad>aaaaa <a>bbbbb </a>asdfs <ffda>adfsaf
asdfasdf <a>adfasdfasf <b>asdfasf
asdfsadf <ff>afasdf <aad>asdfasdf
asdfasdf <dfda>asdfsadf <dfsf>asdfsaffff'

while patindex('%<%>%',@s)>0
begin
set @s=stuff(@s,patindex('%<%',@s),patindex('%>%',@s)-patindex('%<%',@s)+1,'')
end

print @s

/*
asdfd aaaaa bbbbb asdfs adfsaf
asdfasdf adf…
[/Quote]
这个好像能解决呀！