首页 / 编程脚本 / 防SQL注入的VBSrcipt代码

<script language="vbscript"> 
        function checkstr（strname） 
            strn=trim（strname.value） 
            str=trim（strname.value） 
            for i=1 to len（str） 
                strcheck=asc（left（str,1）） 
                if not （（strcheck=<122 and strcheck>=97） or （strcheck<=90 and strcheck>=65） or （strcheck<=57 and strcheck>=48）） then 
                    msgbox（"请勿使用除英文字母及数字以外的字符！"） 
                    strname.value = left（strn,i-1） 
                    strname.focus 
                    exit for 
                end if 
                str=Right（str,len（str）-1） 
            next  
        end function 
        function checknum（） 
            checknum=true 
            if not document.all.txtMailSize.value="" then 
                if not IsNumeric（document.all.txtMailSize.value） then 
                    msgbox（"请勿使用数字以外的字符！"） 
                    document.all.txtMailSize.value="" 
                    document.all.txtMailSize.focus 
                    checknum=false 
                else if document.all.txtMailSize.value>5 or document.all.txtMailSize.value<0 then 
                        msgbox（"请填写5-0之间的数字！"） 
                        document.all.txtMailSize.value="" 
                        document.all.txtMailSize.focus 
                        checknum=false 
                    end if 
                end if 
            end if 
        end function 

        function checkupdate（） 
            checkupdate=true 
            if document.all.txtU_name.value="" or document.all.txtMailSize.value=""  then 
                msgbox（"您填写的信息不完全！"）         
                checkupdate=false 
            end if 
        end function 
        function compare（） 
            compare=true 
            if not document.all.txtRePsw.value =document.all.txtPsw.value then 
                msgbox（"两次密码输入不一致！"） 
                document.all.txtRePsw.focus 
                compare=false 
            end if 
        end function