【下载文档:  asp删除数据库记录的代码.txt 】

---

asp 删除数据库记录的代码
删除单条记录 复制代码 代码如下: id = saferequest("id") sql="delete from table1 where whereid>"&id&"" rs.open sql,conn,1,3 response.write "" set rs=nothing set conn=nothing 这是过滤非法字符函数 复制代码 代码如下: function saferequest(paraname) dim paravalue paravalue=request(paraname) if isnumeric(paravalue) = true then saferequest=paravalue exit function elseif instr(lcase(paravalue),"select ") > 0 or instr(lcase(paravalue),"insert ") > 0 or instr(lcase(paravalue),"delete from") > 0 or instr(lcase(paravalue),"count(") > 0 or instr(lcase(paravalue),"drop table") > 0 or instr(lcase(paravalue),"update ") > 0 or instr(lcase(paravalue),"truncate ") > 0 or instr(lcase(paravalue),"asc(") > 0 or instr(lcase(paravalue),"mid(") > 0 or instr(lcase(paravalue),"char(") > 0 or instr(lcase(paravalue),"xp_cmdshell") > 0 or instr(lcase(paravalue),"exec master") > 0 or instr(lcase(paravalue),"net localgroup administrators") > 0 or instr(lcase(paravalue)," and ") > 0 or instr(lcase(paravalue),"net user") > 0 or instr(lcase(paravalue)," or ") > 0 or instr(lcase(paravalue),"""")>0 or instr(lcase(paravalue),"'")>0 then response.write "请不要在函数中加入非法字符！" response.end else saferequest=paravalue end if end function 批量删除方法： 主要是利用for循环来实现。 复制代码 代码如下: id=request.form("checkbox") id=Split(id,",") shu=0 for i=0 to UBound(id) sql="select * from jiang_fname where id="&id(i) set rs=conn.execute(sql) shu=shu+1 next