一、概述 ASP(Active Server Pages)是由Microsoft公司开发的服务器端脚本技术,用于建立动态、交互的WEB应用程序,它包含于Microsoft Internet Information Server(IIS)当中,还有PWS(NT Workstation)和Peer WEB Server(Win95/98),也支持...一、概述 ASP(Active Server Pages)是由Microsoft公司开发的服务器端脚本技术,用于建立动态、交互的WEB应用程序,它包含于Microsoft Internet Information Server(IIS)当中,还有PWS(NT Workstation)和Peer WEB Server(Win95/98),也支持ASP,通过ASP,我们能够将HTML页面、脚本命令、ASP内建对象和AetiveX组件结合起来,建立动态、交互而又高效的Web应用程序,Web服务器ASP是一种Web服务器端脚本运行环境,现在的IIS5.0已经支持ASP3.0,Web服务器(IIS3.0/4.0/5.0),会自动将你设计的ASP程序码解释为标准的HTML格式的主页内容,在用户端的浏览器(IE/Netscape)上显示出来。展开更多
With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and...With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and used in the wild. This paper analyzes the principle of SQL injection attacks on Web sites, presents methods available to prevent IIS ＋ ASP ＋ MSSQL web applications from these kinds of attacks, including secure coding within the web application, proper database configuration, deployment of IIS. The result is verified by WVS report.展开更多
文摘一、概述 ASP(Active Server Pages)是由Microsoft公司开发的服务器端脚本技术,用于建立动态、交互的WEB应用程序,它包含于Microsoft Internet Information Server(IIS)当中,还有PWS(NT Workstation)和Peer WEB Server(Win95/98),也支持ASP,通过ASP,我们能够将HTML页面、脚本命令、ASP内建对象和AetiveX组件结合起来,建立动态、交互而又高效的Web应用程序,Web服务器ASP是一种Web服务器端脚本运行环境,现在的IIS5.0已经支持ASP3.0,Web服务器(IIS3.0/4.0/5.0),会自动将你设计的ASP程序码解释为标准的HTML格式的主页内容,在用户端的浏览器(IE/Netscape)上显示出来。
文摘With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and used in the wild. This paper analyzes the principle of SQL injection attacks on Web sites, presents methods available to prevent IIS ＋ ASP ＋ MSSQL web applications from these kinds of attacks, including secure coding within the web application, proper database configuration, deployment of IIS. The result is verified by WVS report.
