Question

求助！！！！请不要在参数中包含非法字符注入！

我打开我们学校网站的时候总是出现这个，把管理入口的登陆框给占了，有没有哪位大侠看看是怎么回事儿啊。。不胜感激！！
<tr>
<td width="200" valign="top">
<table>
<tr>
<td>
<table width="100%" align="left">
<tr>
<td width="30">
<img src="tupian/guanli.jpg" height="25"/>
</td>
<td colspan="2" background="tupian/left_title_bg.gif" height="30" width="170">
<font color="#FFFFFF" size="+1" face="新宋体"><strong>管理入口</strong></font>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<iframe MARGINWIDTH=0 MARGINHEIGHT=0 HSPACE=0 VSPACE=0 FRAMEBORDER=0 SCROLLING=no src='/netean/user/login.asp' height=120 width=190></iframe>
</td>
</tr>
<tr>
<td>
<table width="100%" align="left">
<tr>
<td width="30">
<img src="tupian/rili.jpg" height="25"/>
</td>
<td colspan="2" background="tupian/left_title_bg.gif" height="30" width="170">
<font color="#FFFFFF" size="+1" face="新宋体"><strong>电子日历</strong></font>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<table width="100%" align="left">
<tr>
<td colspan="2">
<div onClick="bShow=true" id="calendar">
<table width="'+((showWeekNumber==1)?250:220)+'" style="font-family:ms shell dlg;font-size:12px;border: 1px solid #A0A0A0;" bgcolor="#ffffff">
<tr>
<td style="padding:5px" bgcolor="#ffffff">
<span id="content"></span>
</td>
</tr>

Answer 1

引起问题的不是这段代码
有类似的东西么？：
Response.Buffer = True
Dim SQL_inj,SQL_injdata,SQL_Get,SQL_Data
SQL_injdata = "'|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare|set"
SQL_inj = split(SQL_Injdata,"|")

If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then
Response.Write "<Script Language=JavaScript>alert('请不要在参数中包含非法字符尝试注入！');history.back(-1)</Script>"
Response.end
end if
next
Next

Answer 2

直接输入， 你学校网址/netean/user/login.asp 登陆