A potentially dangerous Request.Form value was detected from the client (ContentBody_txtContent="<style type="text/cs...").
.aspx新增了<%@ Page validateRequest="false"%>
最後找到還需要在web.config裡面新增<httpRuntime requestValidationMode="2.0" />
相關專案: SINGTEX
<!DOCTYPE html>
<html>
<head>
<script src="http://code.jquery.com/jquery-latest.js"></script>
</head>
<body>
<input name="man-news" />
<input name="milkman" />
<input name="letterman2" />
<input name="newmilk" />
<script>$('input[name*="man"]').val('has man in it!');</script>
</body>
</html>
select RANK() over (order by username) as ranking, *
from member
where Email like '%reiko%'
order by Username desc
http://nani.uwinfo.com.tw/?p=197
http://ssorc.tw/rewrite.php/read-631.html
安裝 GeoIP:
安裝 Perl 模組
在 cmd 下, 輸入 "ppm install Geo-IP-PurePerl"
下載 Data:
1. Install Perl module. Open your Perl Package Manager which is stand for ppm.bat in bin folder.
2. Install Geo-IP-PurePerl and Geo-IPfree module.
3. Download the GeoIP data from, http://www.maxmind.com/download/geoip/database/. (要 dat 的格式, 不要 csv 的)
4. Extract the data and place it to C:\Perl\lib\Geo\IP folder.
5. Open the awstats.base.conf(C:\awstats\wwwroot\cgi-bin) and paste the following command.
LoadPlugin="geoip GEOIP_STANDARD C:\Perl\lib\Geo\IP\GeoIP.dat"
6. You have done and you will see the result in next update.
當principal DB異常時，若無見證DB，可以手動執行下面指令，讓mirror DB可以正常運作
ALTER DATABASE [ReikoTEST] SET PARTNER OFF
RESTORE DATABASE [ReikoTEST] WITH RECOVERY
※framework 1.1
※IIS未出現1.1選項，註冊1.1
cmd
cd C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
Aspnet_regiis.exe -u
Aspnet_regiis.exe -i
※aspx no work
開始=>執行=>
regsvr32 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
※framework 2.0
※註冊2.0
cmd
cd C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
Aspnet_regiis.exe -u
Aspnet_regiis.exe -i
刪除資料庫
DROP DATABASE name;
SQL版本查詢
SELECT SERVERPROPERTY('productversion')
SELECT SERVERPROPERTY ('productlevel')
SELECT SERVERPROPERTY ('edition')
with(nolock, index(IX_NTA_StayingRoomSales))
Select * From Table with(nolock, index(IX_NTA_StayingRoomSales)) Where AAAAA
[InvalidOperationException: 由於該物件目前的狀態，導致作業無效。]
System.Web.HttpValueCollection.ThrowIfMaxHttpCollectionKeysExceeded() +2692302
System.Web.HttpValueCollection.FillFromEncodedBytes(Byte[] bytes, Encoding encoding) +61
System.Web.HttpRequest.FillInFormCollection() +148
[HttpException (0x80004005): URL 編碼型式資料無效。]
System.Web.HttpRequest.FillInFormCollection() +206
System.Web.HttpRequest.get_Form() +68
System.Web.HttpRequest.get_HasForm() +8735447
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +97
System.Web.UI.Page.DeterminePostBackMode() +63
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +133
Error Msg:
若你的 Web 應用程式真的會傳遞超過 1,000 個欄位時，這個預設值也是可以設定的，請修改網站根目錄下的 web.config 檔，並在
<appSettings>
<add key="aspnet:MaxHttpCollectionKeys" value="2500" />
</appSettings>
http://blog.miniasp.com/post/2012/01/01/Efficient-Denial-of-Service-Attacks-on-Web-Application-Platforms.aspx