【求教高手~】ASP程序有点小错误,拜托了。。。谢谢!!
ASP做的新闻发布系统,运行首页显示出来了,可是无论点哪个超链接都显示下面的错误提示。。
ASP服务器发现运行时错误,以下是错误的详细描述:
Microsoft VBScript 运行时错误
错 误 码:0x800A01CA
错误代码:strtemp=request.servervariables("server_name")&request.servervariables("url")&"?"&request.querystring
错误描述:变量使用了一个 VBScript 中不支持的 Automation 类型
文件名称:e:\毕业设计\资料\凹丫丫新闻发布系统v4.6完整无错access版\凹丫丫新闻发布系统v4.6完整无错access版\jsinc\safe.asp
所在行号:19
----------------------------------------------------------------
我把safe.asp的源码贴出来。。
<%
strtemp=request.servervariables("server_name")&request.servervariables("url")&"?"&request.querystring
strtemp = lcase(strtemp)
if instr(strtemp,"select%20") or instr(strtemp,"insert%20") or instr(strtemp,"delete%20from") or instr(strtemp,"count(") or instr(strtemp,"drop%20table") or instr(strtemp,"update%20") or instr(strtemp,"truncate%20") or instr(strtemp,"asc(") or instr(strtemp,"mid(") or instr(strtemp,"char(") or instr(strtemp,"xp_cmdshell") or instr(strtemp,"exec%20master") or instr(strtemp,"net%20localgroup%20administrators") or instr(strtemp,"net%20user") or instr(strtemp,"%20or%20") or instr(strtemp,"'") or instr(strtemp,"%20") or instr(strtemp,"""") or instr(strtemp,"“") or instr(strtemp,"”") or instr(strtemp,":") or instr(strtemp,":") or instr(strtemp,";") or instr(strtemp,";") or instr(strtemp,",") or instr(strtemp,",") or instr(strtemp,"(") or instr(strtemp,")") or instr(strtemp,"、") or instr(strtemp,"\") or instr(strtemp,"`") or instr(strtemp,"^") or instr(strtemp,"*") or instr(strtemp,"~") or instr(strtemp,"-") or instr(strtemp,"%27") then
response.write " <script language='javascript'>alert('对不起,不可以包含特殊字符!');history.back(); </script>"
response.end
end if
%>