Web???????????????????????

???????????????ó??Щ???????????????????????/Pages/Security/?′???UserList.aspx??MenuList.aspx?????
????[??????]
????1?????url?????“~”??????Unicode????
????2?????windows??8.3????????
???????????ο??????????????????????????????д?????ɡ?
????http://sebug.net/vuldb/ssvid-60252
????http://webscan.#/vul/view/vulid/1020
????http://www.bitscn.com/network/security/200607/36285.html
????5??????????й?????????
????????????????page??????н???Session?ж????????????????????????????????????????????????????????
??????????????????????Щ??????????????????棬????????Session?ж????????????????????????Web??????棬???????BasePage??BasePage ?????????????????ж??
public partial class UserList : BasePage
{
protected void Page_Load(object sender?? EventArgs e)
{
...............
/// <summary>
/// BasePage ??????????????????FPage???????????????BasePage
/// </summary>
public class BasePage : FPage
{
/// <summary>
/// ????????
/// </summary>
public BasePage()
{
this.IsFunctionControl = true;//???????????????
}
/// <summary>
/// ???????????
/// </summary>
private void CheckLogin()
{
if (string.IsNullOrEmpty(Permission.Identity))
{
string url = string.Format("{0}/Pages/CommonPage/Login.aspx?userRequest={1}"??
Request.ApplicationPath.TrimEnd('/')?? HttpUtility.UrlEncode(Request.Url.ToString()));
Response.Redirect(url);
}
}
/// <summary>
/// ????HasFunction?????????????ж?????????????????
/// </summary>
/// <param name="functionId"></param>
/// <returns></returns>
protected override bool HasFunction(string functionId)
{
CheckLogin();
bool breturn = false;
try
{
breturn = Permission.HasFunction(functionId);
}
catch (Exception)
{
Helper.Alerts(this?? "BasePage???????????HasFunction????????");
}
return breturn;
}
protected override void OnInit(EventArgs e)
{
Response.Cache.SetNoStore(); //???????
base.OnInit(e);
CheckLogin();
}
????????????????????????????????????????????????Щ??????????????????????
??????????????????????????????????????????磬?????????????????????????????????粻???????????????????????????????λ??????????????????????12345678??123456??123??????????????????3??????????????????????????
????6??????????
??????????淢?????????????漸?????顣
????1??????????????????????÷???????????????????????????????????
????2?????????????????????磺???????IP????????????????????????
????3?????????????????????氳????????????????????????SQL ??XSS???????????Щ?????????????????????ɡ?
????4?????windows??8.3????????
????5????????????????????????