非法字符都要过滤哪些?

[lele20100_]

呵呵
请问一下,通常情况下过滤的非法字符都有哪些?
而且在传递给其它页面时,应该如何很好的处理这种情况呢

[starytx]

一般过滤单引号吧

[chuangsheng]

过滤的语句都有
ReplaceBadChar=replace(replace(replace(replace(replace(replace(replace(strChar,"'",""),"*",""),"?",""),"(",""),")",""),"<",""),".","")

[yopy]

楼上正解!

[lele20100_]

过滤之后还是应该打开本页吧?

[starytx]

不明白你说的是什么意思

[xtuwz]

你SQL語句中有啥關鍵字呢?有*不是,有'不是,多呢,最好要將空格過濾掉

[lxcooi]

只有单引号

至于为什么自己看注入的原理。

[xutao888]

ReplaceBadChar=replace(replace(replace(replace(replace(replace(replace(strChar,"'",""),"*",""),"?",""),"(",""),")",""),"<",""),".","")

[99percent]

'
""
;
select
>
<
delete
update
create
.................關鍵字.