asp 防止外部提交方法

作者：袖梨 2022-07-02

简单方法一
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "

"
response.write "

"
response.write "你提交的路径有误，禁止从站点外部提交数据！"
response.write "

"
response.end
end if

方法二。
怎么伪造HTTP_REFERER
这么说来我这个函数也是要不得的。

Function CheckPageFrom()
       DIM HOST,REFERER
       HOST = Request.ServerVariables("HTTP_HOST")
       REFERER = Request.ServerVariables("HTTP_REFERER")
       If Cstr(Left(Replace(REFERER,"http://",""),Len(HOST))) = Cstr(HOST) Then
              CheckPageFrom = True
Else
      CheckPageFrom = False

End If
End Function