<?php
error_reporting(0);
@$tok=strtolower($_SERVER["QUERY_STRING"]);
$sowords="and|exec|insert|select|delete|update|count|chr|mid|master|truncate|char|declare|'";
$rpword = strtok($sowords,"|");
while($rpword){
	if (strlen(strstr($tok,$rpword))>0){
		if (!is_dir("l/err")){
		    mkdir("l/err",0777);    
		}
		$errinfo=date("Y-m-d H:i:s")." | ".$tok."\n";
		$filnew = @fopen("l/err/err.txt","a+"); 
	    @fwrite($filnew,$errinfo); 
	    @fclose($filnew);
		echo "<script>alert('µã»÷Çë·µ»ØÊ×Ò³');window.location.href='/?err'</script>";
		exit;
	}
	$rpword = strtok("|");		
}
mysql_connect ("101.1.27.28","f02018","F2xI2yEQ");
mysql_query("set names gbk");    
mysql_select_db("sqlf02018");
?>