Web开发常见的几个漏洞解决方法

        /// <summary>
        /// 验证是否存在注入代码(条件语句）
        /// </summary>
        /// <param name="inputData"></param>
        public bool HasInjectionData(string inputData)
        {
            if (string.IsNullOrEmpty(inputData))
                return false;

            //里面定义恶意字符集合
            //验证inputData是否包含恶意集合
            if (Regex.IsMatch(inputData.ToLower(), GetRegexString()))
            {
                return true;
            }
            else
            {
                return false;
            }
        }

        /// <summary>
        /// 获取正则表达式
        /// </summary>
        /// <returns></returns>
        private static string GetRegexString()
        {
            //构造SQL的注入关键字符
            string[] strBadChar =
            {
                //"select\\s",
                //"from\\s",
                "insert\\s",
                "delete\\s",
                "update\\s",
                "drop\\s",
                "truncate\\s",
                "exec\\s",
                "count\\(",
                "declare\\s",
                "asc\\(",
                "mid\\(",
                "char\\(",
                "net user",
                "xp_cmdshell",
                "/add\\s",
                "exec master.dbo.xp_cmdshell",
                "net localgroup administrators"
            };

            //构造正则表达式
            string str_Regex = ".*(";
            for (int i = 0; i < strBadChar.Length - 1; i++)
            {
                str_Regex += strBadChar[i] + "|";
            }
            str_Regex += strBadChar[strBadChar.Length - 1] + ").*";

            return str_Regex;
        }

        /// <summary>
        /// 根据条件查询数据库,并返回对象集合
        /// </summary>
        /// <param name="condition">查询的条件</param>
        /// <param name="orderBy">自定义排序语句，如Order By Name Desc；如不指定，则使用默认排序</param>
        /// <param name="paramList">参数列表</param>
        /// <returns>指定对象的集合</returns>
        public virtual List<T> Find(string condition, string orderBy, IDbDataParameter[] paramList)
        {
            if (HasInjectionData(condition))
            {
                LogTextHelper.Error(string.Format("检测出SQL注入的恶意数据, {0}", condition));
                throw new Exception("检测出SQL注入的恶意数据");
            }

            ...........................
        }

            Database db = CreateDatabase();
            DbCommand command = db.GetSqlStringCommand(sql);
            command.Parameters.AddRange(param);

        protected void Page_Load(object sender, EventArgs e)
        {
            this.lblName.Text = Encoder.HtmlEncode("<script>alert('OK');</SCRIPT>");
        }

        protected void btnPost_Click(object sender, EventArgs e)
        {
            this.lblName.Text = Sanitizer.GetSafeHtmlFragment(txtName.Text);
        }

    public partial class UserList : BasePage
    {
        protected void Page_Load(object sender, EventArgs e)
        {
          ...............

    /// <summary>
    /// BasePage 集成自权限基础抽象类FPage，其他页面则集成自BasePage
    /// </summary>
    public class BasePage : FPage
    {
        /// <summary>
        /// 默认构造函数
        /// </summary>
        public BasePage()
        {
            this.IsFunctionControl = true;//默认页面启动权限认证
        }

        /// <summary>
        /// 检查用户是否登录
        /// </summary>
        private void CheckLogin()
        {
            if (string.IsNullOrEmpty(Permission.Identity))
            {
                string url = string.Format("{0}/Pages/CommonPage/Login.aspx?userRequest={1}",
                    Request.ApplicationPath.TrimEnd('/'), HttpUtility.UrlEncode(Request.Url.ToString()));
                Response.Redirect(url);
            }
        }

        /// <summary>
        /// 覆盖HasFunction方法以使权限类判断是否具有某功能点的权限
        /// </summary>
        /// <param name="functionId"></param>
        /// <returns></returns>
        protected override bool HasFunction(string functionId)
        {
            CheckLogin();

            bool breturn = false;
            try
            {
                breturn = Permission.HasFunction(functionId);
            }
            catch (Exception)
            {
                Helper.Alerts(this, "BasePage调用权限系统的HasFunction函数出错");
            }
            return breturn;
        }

        protected override void OnInit(EventArgs e)
        {
            Response.Cache.SetNoStore(); //清除缓存
            base.OnInit(e);

            CheckLogin();
        }