Test_Tools/RequestCheck.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Collections.Generic;
using System.Text;
//
using System.Web;
using System.Text.RegularExpressions;

namespace Tools
{
    /// <summary>
    /// 页面Request对象检查

    /// </summary>
    public class RequestCheck
    {
        private HttpRequest request;
        private const string StrKeyWord = @"select|insert|delete|from|count(|drop table|update|truncate|asc(|mid(|char(|xp_cmdshell|exec master|netlocalgroup administrators|:|net user|""|or|and";
        private const string StrRegex = @"[-|;|,|/|(|)|[|]|}|{|@|*|!|']";

        /// <summary>
        /// 构造函数

        /// </summary>
        public RequestCheck(System.Web.HttpRequest _request)
        {
            this.request = _request;
        }

        /// <summary>
        /// 只读属性 SQL关键字

        /// </summary>
        public static string KeyWord
        {
            get
            {
                return StrKeyWord;
            }
        }
        /// <summary>
        /// 只读属性过滤特殊字符

        /// </summary>
        public static string RegexString
        {
            get
            {
                return StrRegex;
            }
        }

        /// <summary>
        /// 检查URL参数中是否带有SQL注入可能关键字。

        /// </summary>
        /// <param name="_request">当前HttpRequest对象</param>
        /// <returns>存在注入活特殊关键字true存在，false不存在</returns>
        public bool CheckRequestQuery()
        {
            if (request.QueryString.Count != 0)