How to prevent the MDB file in the ASP + Access application.

xiaoxiao2021-03-06  45

4 Anti-Fan MDB file downloaded: First trick: Try to take a complex file name; Second, change the file extension as an ASA or ASP, you can make it unable to download in IE, but if there is no fourth trick, use Flashget and other software can also be downloaded; the third stroke: the file name begins with "#", it can prevent the file name in SQL injection method; the fourth stroke: Create a table in the database, one field, fill in the in-picture like <% = 'a'-1%> The content will be reported when IE or FlashGet explains the script code, so the database will not be downloaded.

转载请注明原文地址:https://www.9cbs.com/read-78106.html

New Post(0)