ASP输入表单，如何限制输入字数及禁止相关敏感字符？

答案:3 悬赏:0 手机版

解决时间 2021-01-30 00:20

提问者网友：浩歌待明月
2021-01-29 20:00

最佳答案

五星知识达人网友：山君与见山
2021-01-29 21:13

方法非常简单,不过需要注意的是,楼上的方法是在误导,因为在客户端的验证就是摆设,黑客很容易避开,所以没用.

验证字数:
1,首先获取数据并赋值给变量
aa=request......
2,判断
if len(aa)>1000 then Response.Write "不要超过1000字符"

判断非法字符
1,首先获取数据并赋值给变量
aa=request......
2,判断
if Instr(aa,"非法字符")>0 then Response.Write "包含非法字符这四个字"

全部回答

1楼网友：低音帝王
2021-01-29 23:09

超过多少个字数，cut掉吧
nr=left("nr",1000)

2楼网友：一把行者刀
2021-01-29 22:11

多行文本框如何限制输入字数方法
方法一

<br />方法二<br /><br /><textarea name="textfield" onkeyup="javascript:chkmaxsms(this,'10')"><br />敏感字符需要你通过提交到服务器端自己写函数判断，或者在客户端用ajax做判断 <br />function changechr(str)<br />changechr=replace(replace(replace(replace(str,"<","<"),">",">"),chr(13),"<br>")," "," ")<br />changechr=replace(replace(replace(replace(changechr,"[sayyes]","<div align=center>"),"[red]","<font color=CC0000>"),"[big]","<font size=7>")<br />changechr=replace(replace(replace(replace(changechr,"[/sayyes]","></img></div>"),"[/b]",""),"[/red]","</font>"),"[/big]","</font>")<br />end function<br />'过滤SQL非法字符并格式化html代码<br />function Replace_Text(fString)<br />if isnull(fString) then<br />Replace_Text=""<br />exit function<br />else<br />fString=trim(fString)<br />fString=replace(fString,"'","''")<br />fString=replace(fString,";","；")<br />fString=replace(fString,"--","—")<br />fString=server.htmlencode(fString)<br />Replace_Text=fString<br />end if<br />end function<br />'会员发布的各种信息过滤<br />'Function Replace_Text(fString)<br />'If Not IsNull(fString) Then<br />'fString = trim(fString)<br />'fString = replace(fString, ";", "；")      '分号过滤<br />'fString = replace(fString, "--", "——") '--过滤<br />'fString = replace(fString, "%20", "")     '特殊字符过滤<br />'fString = replace(fString, "==", "")      '==过滤<br />'fString = replace(fString, ">", ">")<br />'fString = replace(fString, "<", "<")<br />'fString = Replace(fString, CHR(32), " ")    '空格;<br />'fString = Replace(fString, CHR(9), " ")     'Horizontal Tab;<br />'fString = Replace(fString, CHR(34), """)'双引号<br />'fString = Replace(fString, CHR(39), "'") '单引号过滤<br />'fString = Replace(fString, CHR(13), "") '回车<br />'fString = Replace(fString, CHR(10) & CHR(10), "</P><P> ")<br />'fString = Replace(fString, CHR(10), "<BR> ")<br />'Replace_Text = fString<br />'End If<br />'End Function<br />'过滤SQL非法字符<br />Function checkStr(Chkstr)<br />dim Str:Str=Chkstr<br />if isnull(Str) then<br />    checkStr = ""<br />    exit Function<br />else<br />    Str=replace(Str,"'","")<br />    Str=replace(Str,";","")<br />    Str=replace(Str,"--","")<br />    checkStr=Str<br />end if<br />End Function</div>




<div class="s-title">我要举报</div>
<div class="content">如以上回答内容为低俗、色情、不良、暴力、侵权、涉及违法等信息，可以点下面链接进行举报！
<br>
<a href="javascript:SendReport('','4867389','10');"><div class="btns-black">点此我要举报以上问答信息</div></a>
</div>
<div class="m head_s" id="destoon_space"></div>
<script type="text/javascript">
function SendReport(c,id,mid) {
    var mbpath="https://m.zhsho.com/";
var c = c ? c : ($('#title').length > 0 ? $('#title').html() : document.title)+'\n'+window.location.href;
if(id){
    var htm = '<form method="post" action="'+mbpath+'api/report.php?itemid='+id+'&mid='+mid+'" id="dreport">';
}else{
    var htm = '<form method="post" action="'+mbpath+'api/report.php" id="dreport">';
}
htm += '<textarea style="display:none;" name="content">'+c+'

'; htm += ''; $('#destoon_space').html(htm); Dd('dreport').submit(); }