模仿csdn的代码，己整理的Linux常用命令(4)

height: 230px; float: left;

list-style: none;

}

#wrap ul{

position: absolute; left: 0; top: 0;

}

#wrap{

width: 1520px; height: 230px;

margin: 100px 50px; position: relative; background: red; overflow: hidden;

}

[代码] 获取的参数 //获取的参数

function getParam(paramKey){ //获取当前

var = location.href; //获取要取得的get参数位置

var get = .indexOf(paramKey +\ if(get == -1){

return false; }

//截取字符串

var getParamStr = .slice(paramKey.length + get + 1); //判断截取后的字符串是否还有其他get参数 var nextparam = getParamStr.indexOf(\ if(nextparam != -1){

getParamStr = getParamStr.slice(0, nextparam); }

return decodeURIComponent(getParamStr); }

[代码] 添加参数 //添加参数

function addParam(,paramKey,paramVal){ var andStr = \

var beforeparam = .indexOf(\ if(beforeparam != -1){ andStr = \ }

return + andStr + paramKey + \}

[代码] 删除参数 //删除参数

function delParam(,paramKey){

var Param = .substr(.indexOf(\ var before = .substr(0,.indexOf(\ var next = \

var arr = new Array(); if(Param!=\

var ParamArr = Param.split(\

for(var i=0;i

var paramArr = ParamArr[i].split(\ if(paramArr[0]!=paramKey){ arr.push(ParamArr[i]); } } }

if(arr.length>0){

next = \ }

= before+next; return ; }

[代码] [C#]代码

#region 防止sql注入式攻击(可用于UI层控制） ///

/// 判断字符串中是否有SQL攻击代码 ///

/// 传入用户提交数据

/// true-安全；false-有注入攻击现有；

public bool ProcessSqlStr(string inputString) {

string SqlStr =

@\r|char|asc|mid|substring|master|truncate|declare|xp_cmdshell|restore|backup|net +user|net +localgroup +administrators\ try {

if ((inputString != null) && (inputString != String.Empty)) {

string str_Regex = @\

Regex Regex = new Regex(str_Regex, RegexOptions.IgnoreCase); //string s = Regex.Match(inputString).Value; if (true == Regex.IsMatch(inputString)) return false;

} } catch {

return false; }

return true; } ///

/// 处理用户提交的请求，校验sql注入式攻击,在页面装置时候运行 ///

System.Configuration.ConfigurationSettings.AppSettings[\为用户自定义错误页面提示地址,

/// 在Web.Config文件时里面添加一个 ErrorPage 即可 /// /// ///

public void ProcessRequest() {

try {

string getkeys = \ string sqlErrorPage =

System.Configuration.ConfigurationSettings.AppSettings[\ if (System.Web.HttpContext.Current.Request.QueryString != null) {

for (int i = 0; i <

System.Web.HttpContext.Current.Request.QueryString.Count; i++) {

getkeys =

System.Web.HttpContext.Current.Request.QueryString.Keys[i]; if

(!ProcessSqlStr(System.Web.HttpContext.Current.Request.QueryString[getkeys])) {

System.Web.HttpContext.Current.Response.Redirect(sqlErrorPage + \getkeys + \有SQL攻击嫌疑！\

System.Web.HttpContext.Current.Response.End(); } } }

if (System.Web.HttpContext.Current.Request.Form != null) {

for (int i = 0; i < System.Web.HttpContext.Current.Request.Form.Count; i++)

{

getkeys = System.Web.HttpContext.Current.Request.Form.Keys[i];

if

(!ProcessSqlStr(System.Web.HttpContext.Current.Request.Form[getkeys])) {

System.Web.HttpContext.Current.Response.Redirect(sqlErrorPage + \getkeys + \有SQL攻击嫌疑！\

System.Web.HttpContext.Current.Response.End(); } } } } catch {

// 错误处理: 处理用户提交信息! } }

#endregion

#region 转换sql代码（也防止sql注入式攻击，可以用于业务逻辑层，但要求UI层输入数据时候进行解码） ///

/// 提取字符固定长度 /// /// /// ///

public string CheckStringLength(string inputString, Int32 maxLength) {

if ((inputString != null) && (inputString != String.Empty)) {

inputString = inputString.Trim();

if (inputString.Length > maxLength)

inputString = inputString.Substring(0, maxLength); }

return inputString; } ///

/// 将输入字符串中的sql敏感字，替换成\敏感字]\，要求输出时，替换回来 /// ///

/// qhd001.com

public string MyEncodeInputString(string inputString) {