ASP网站中数据库被挂木马的解决方案_木马相关_

<% Server.ScriptTimeOut=180 Set rstSchema = conn.OpenSchema(20) k=1 Do Until rstSchema.EOF '遍历数据库表 If rstSchema("TABLE_TYPE")="TABLE" Then response.write K&"."&rstSchema("TABLE_NAME") & ":" '显示表名Set rs=Server.CreateObject("ADODB.Recordset") sql="select * from [" & rstSchema("TABLE_NAME")&"]" rs.open sql,conn,1,3 For i=0 to rs.fields.count-1 '遍历表中字段If int(rs(i).Type)=129 or int(rs(i).Type)=130 or int(rs(i).Type)=200 or int(rs(i).Type)=201 or int(rs(i).Type)=202 or int(rs(i).Type)=203 Then'只处理字段类型为字符型的字段 conn.execute("update ["&rstSchema("TABLE_NAME")&"] set "&rs(i).name&" =replace(cast("&rs(i).name&" as varchar(8000)),'这里放入JS木马内容','')") response.write rs(i).name &" "&rs(i).Type &" "'显示执行过的字段名。 End If Next response.write " " End If rstSchema.MoveNext kk=k+1 Loop response.Write "执行成功" %>

Function Cheack_Sqljs()'防止数据库外链JS注入:true为发现外链JS注入。 Dim F_Post,F_Get Cheack_Sqljs=False If Request.Form<>"" Then'表单提交时的检测For Each F_Post In Request.Form If (Instr(LCase(Request.Form(F_Post)), "0 or Instr(LCase(Request.Form(F_Post)),"")<>0) and Instr(LCase(Request.Form(F_Post)),"http://")<>0 Then Cheack_Sqljs=True Exit For End If Next End If If Request.QueryString<>"" Then'QueryString提交时的检测For Each F_Get In Request.QueryString If (Instr(LCase(Request.Form(F_Get)),"0 orInstr(LCase(Request.Form(F_Get)),"")<>0) and Instr(LCase(Request.Form(F_Get)),"http://")<>0 Then Cheack_Sqljs=True Exit For End If Next End If End Function Function CheckDataFrom()'检查提交数据来源：True为数据从站外提交过来的 CheckDataFrom=True server_v1=Cstr(Request.ServerVariables("HTTP_REFERER")) server_v2=Cstr(Request.ServerVariables("SERVER_NAME")) if mid(server_v1,8,len(server_v2))<>server_v2 then CheckDataFrom=False end if End Function If Cheack_Sqljs or CheckDataFrom Then Response.Write "" Response.End() End If