Forum Moderators: open

Message Too Old, No Replies

ASP function for SQL Injection Protection

         

indigojo

4:43 am on Nov 12, 2007 (gmt 0)

10+ Year Member



Can anyone help me with an ASP function that does something like below and one that I can include in all key pages as an include:

If page is Detail.asp? then only allow numerics and 5 characters max

or

If page is Items.asp? then only allow numerics and 4 characters max

or

If page is order.asp? then only allow numerics and 3 characters max

stevelibby

5:44 pm on Nov 12, 2007 (gmt 0)

10+ Year Member



why not use a select case
something like
select case page
case "detail"
check length & numeric
result true /false
case "items"
check length & numericitems
result true /false
end select

indigojo

10:36 pm on Nov 13, 2007 (gmt 0)

10+ Year Member



Thanks stevelibby, i'll try this