如何提高Asp网站的安全性

[zhutian198902]

如何查出Asp网站中有那些漏洞？
怎样阻止并修复这些漏洞？

[yan11cn]

下个asp网站漏洞扫描器试试吧
但是最基本的比如sql防注（非法字符过滤）
sql防下载等你得做好

[syjeffdyg]

SQL注入、暴库等，上网查下就行了。

[jack_ailly]

关于BS架构系统，防止SQL注入攻击的思路

[后浪]

Function Encode(ByVal StrHTML,CodeType)
If StrHTML <> "" Then
If CodeType Then
StrHTML = Replace(StrHTML, "&", "&")
StrHTML = Replace(StrHTML, "<", "<")
StrHTML = Replace(StrHTML, ">", ">")
StrHTML = Replace(StrHTML, Chr(9), " ")
StrHTML = Replace(StrHTML, Chr(10), "<br />")
StrHTML = Replace(StrHTML, Chr(13), "")
StrHTML = Replace(StrHTML, Chr(34), """)
Else
StrHTML = Replace(StrHTML, "&","&")
StrHTML = Replace(StrHTML, "<","<")
StrHTML = Replace(StrHTML, ">",">")
StrHTML = Replace(StrHTML, " ",Chr(9))
StrHTML = Replace(StrHTML, "<br />",Chr(10))
StrHTML = Replace(StrHTML, """,Chr(34))
End If
End If
Encode=StrHTML
End Function

写入的数据库的时候，把特殊的字符转换，输出再转回来

[jack_ailly]

http://topic.csdn.net/u/20090729/14/26381958-0d6e-4b90-bc90-d275e9621f93.html