YaCloud/Yact-Backup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

clean git

Browse Source
This commit is contained in:
高桁一@数字公司
2025-07-13 12:02:30 +08:00
commit 0e354d2cc2
1483 changed files with 309507 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

67
www/360_safe3.asp Normal file
View File

@@ -0,0 +1,67 @@
<%
'Code by safe3
On Error Resume Next
if request.querystring<>"" then call stophacker(request.querystring,"<.*=&#\d+?;??>|<.*data=data:text\/html.*>|\b(alert\(|confirm\(|expression\(|prompt\(|benchmark\s*?\(\d+?|sleep\s*?\([\d\.]+?\)|load_file\s*?\()|<[a-z]+?\b[^>]*?\bon([a-z]{4,})\s*?=|^\+\/v(8|9)|\b(and|or)\b\s*?(=|>|<|\s+?[\w]+?\s+?\bin\b\s*?\(|\blike\b\s+?)|\/\*.+?\*\/|<\s*script\b|\bEXEC\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\s+(TABLE|DATABASE)")
if Request.ServerVariables("HTTP_REFERER")<>"" then call test(Request.ServerVariables("HTTP_REFERER"),"'|\b(and|or)\b.+?(>|<|=|\bin\b|\blike\b)|/\*.+?\*/|<\s*script\b|\bEXEC\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\s+(TABLE|DATABASE)")
if request.Cookies<>"" then call stophacker(request.Cookies,"\b(and|or)\b.{1,6}?(=|>|<|\bin\b|\blike\b)|/\*.+?\*/|<\s*script\b|\bEXEC\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\s+(TABLE|DATABASE)")
call stophacker(request.Form,"<[^>]+?style=[\w]+?:expression\(|\bonmouse(over|move)=\b|\b(alert|confirm|prompt)\b|^\+/v(8|9)|<[^>]*?=[^>]*?&#[^>]*?>|\b(and|or)\b.{1,6}?(=|>|<|\bin\b|\blike\b)|/\*.+?\*/|<\s*script\b|<\s*img\b|\bEXEC\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\s+(TABLE|DATABASE)")
function test(values,re)
dim regex
set regex=new regexp
regex.ignorecase = true
regex.global = true
regex.pattern = re
if regex.test(values) then
IP=Request.ServerVariables("HTTP_X_FORWARDED_FOR")
If IP = "" Then
IP=Request.ServerVariables("REMOTE_ADDR")
end if
'slog("<br><br><3E><><EFBFBD><EFBFBD>IP: "&ip&"<br><3E><><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1>: " & now() & "<br><3E><><EFBFBD><EFBFBD>ҳ<EFBFBD>棺"&Request.ServerVariables("URL")&"<br><3E>ύ<EFBFBD><E1BDBB>ʽ: "&Request.ServerVariables("Request_Method")&"<br><3E>ύ<EFBFBD><E1BDBB><EFBFBD><EFBFBD>: "&l_get&"<br><3E>ύ<EFBFBD><E1BDBB><EFBFBD><EFBFBD>: "&l_get2)
Response.Write("<script>alert('<27>Բ<EFBFBD><D4B2><EFBFBD><EFBFBD><EFBFBD><EFBFBD>벻Ҫ<EBB2BB>ύ<EFBFBD><E1BDBB><EFBFBD>в<EFBFBD><D0B2>Ϸ<EFBFBD><CFB7>IJ<EFBFBD><C4B2><EFBFBD><EFBFBD><EFBFBD>лл<D0BB><D0BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>');history.back();</script>")
Response.end
end if
set regex = nothing
end function
function stophacker(values,re)
dim l_get, l_get2,n_get,regex,IP
for each n_get in values
for each l_get in values
l_get2 = values(l_get)
set regex = new regexp
regex.ignorecase = true
regex.global = true
regex.pattern = re
if regex.test(l_get2) then
IP=Request.ServerVariables("HTTP_X_FORWARDED_FOR")
If IP = "" Then
IP=Request.ServerVariables("REMOTE_ADDR")
end if
'slog("<br><br><3E><><EFBFBD><EFBFBD>IP: "&ip&"<br><3E><><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1>: " & now() & "<br><3E><><EFBFBD><EFBFBD>ҳ<EFBFBD>棺"&Request.ServerVariables("URL")&"<br><3E>ύ<EFBFBD><E1BDBB>ʽ: "&Request.ServerVariables("Request_Method")&"<br><3E>ύ<EFBFBD><E1BDBB><EFBFBD><EFBFBD>: "&l_get&"<br><3E>ύ<EFBFBD><E1BDBB><EFBFBD><EFBFBD>: "&l_get2)
Response.Write("<script>alert('<27>Բ<EFBFBD><D4B2><EFBFBD><EFBFBD><EFBFBD><EFBFBD>벻Ҫ<EBB2BB>ύ<EFBFBD><E1BDBB><EFBFBD>в<EFBFBD><D0B2>Ϸ<EFBFBD><CFB7>IJ<EFBFBD><C4B2><EFBFBD><EFBFBD><EFBFBD>лл<D0BB><D0BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>');history.back();</script>")
Response.end
end if
set regex = nothing
next
next
end function
sub slog(logs)
dim toppath,fs,Ts
toppath = Server.Mappath("/l.htm")
Set fs = CreateObject("scripting.filesystemobject")
If Not Fs.FILEEXISTS(toppath) Then
Set Ts = fs.createtextfile(toppath, True)
Ts.close
end if
Set Ts= Fs.OpenTextFile(toppath,8)
Ts.writeline (logs)
Ts.Close
Set Ts=nothing
Set fs=nothing
end sub
%>