高手都来帮攻击攻击我做的网站，看有没漏洞，攻瘫痪了奖励100分
高手都来帮攻击攻击我做的网站，看有没漏洞，攻瘫痪了奖励100分

就这个页面
：http://qm-net.net/dingdan/yuding/hotel.aspx

请留下注入的地方，参数，我好调整


或者发到我邮箱：172619185@qq.com


先谢谢大家了

分不够再加

------解决方案--------------------
看戏。
------解决方案--------------------
嘿嘿，没能力的攻不进，有能力的不想攻～～～
------解决方案--------------------
看看 jf
------解决方案--------------------
帮顶！
------解决方案--------------------
路过
------解决方案--------------------
---->
------解决方案--------------------
你服务器放在哪，我打车过去把它砸了，反正是你让攻击的
------解决方案--------------------
分是王道
------解决方案--------------------
地址都打不开！
------解决方案--------------------

 你要不公布源吗.大家才好找啊.
 
 也许大家能很把更好的解决方法给你,还才你的程序才能更健壮
------解决方案--------------------
试试！！
------解决方案--------------------
你的验证是通过js！！
------解决方案--------------------
Server Error in '/' Application.
--------------------------------------------

A potentially dangerous Request.Form value was detected from the client (txt_fname="<script>alert('dfghd..."). 
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. 

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (txt_fname="<script>alert('dfghd...").

Source Error: 


[No relevant source lines]
 

Source File: c:\windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\b2c32990\3dccb028\App_Web_sgvrqfj1.0.cs Line: 0 

Stack Trace: 


[HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (txt_fname="<script>alert('dfghd...").]
System.Web.HttpRequest.ValidateString(String s, String valueName, String collectionName) +3307682
System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, String collectionName) +108
System.Web.HttpRequest.get_Form() +119
System.Web.HttpRequest.get_HasForm() +3309630
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +45
System.Web.UI.Page.DeterminePostBackMode() +65
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +7350
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +213
System.Web.UI.Page.ProcessRequest() +86
System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +18
System.Web.UI.Page.ProcessRequest(HttpContext context) +49