ASPX代码加固小结

 

1、replace替换

<%@Page Language="C#"%>

<%
string strID=Request["id"];
strID = strID.Replace("'","");//单引号过滤
//strID==Globals.HtmlEncode(strID)
Response.Write(strID);
%>

2、转换

<%@ Page Language="C#" %>

<%
string strID =Request["id"];
int strID11 = int.Parse(strID);//string 转换为int
//int strID = int.Parse(Request["id"]);
//int strID = Convert.ToInt32(Request["id"]); //将对象转换为int
//string strID = HttpUtility.HtmlEncode(Request["id"]);//Htmlencode处理

int strID = int.Parse(strID);
Response.Write(strID);


%>