補(bǔ)丁方法:
找到conn.asp文件
'過濾非法字符
function chktopic(str)
if str<>"" then
chktopic=replace(str,"'","''")
end if
end function
找到這一段代碼,修改他為
'過濾非法字符
function chktopic(str)
if str<>"" then
chktopic=replace(str,"'","''")
chktopic=replace(str,"and","!!")
chktopic=replace(str," ","!!")
chktopic=replace(str,"%20","!!")
end if
end function