Skip to main content

Questions tagged [classic-asp]

The earlier versions of Microsofts server side programming language, before ASP.NET.

Filter by
Sorted by
Tagged with
1 vote
2 answers

How to know if an ASP web page is vulnerable to SQL injection?

I've some experiences of working with PHP web applications vulnerable to SQL injection and exploiting this type of vulnerability successfully but never tried to do this on a ASP based web application. ...'s user avatar
1 vote
2 answers

Hiding database passwords for classic ASP connection strings

Looking at some old classic ASP sites which could do with a bit of tightening up. The SQL server database connection string has the password in clear text within an include file on the server. ...
Steve's user avatar
  • 477
4 votes
2 answers

Using classic ASP, is this the right way to do to protect against XSS?

Using classic ASP, is this the right way to do to protect against XSS? var1=untrusteduserinput Showing a text in the body <%=server.htmlencode(var1)%> Showing a link in the body <a href="...
ASP XXS's user avatar
  • 43
10 votes
3 answers

How can this input-sanitizer function be defeated?

There's a Classic ASP application at my job that is (I believe) highly vulnerable to SQL injection. I want to prove to management that this code isn't secure, but all I'm able to do is insert "SQLINJ" ...
Mathieu Guindon's user avatar
1 vote
1 answer

Random pages getting created on classic asp site

In the file structure of my site, I see some randomly generated files like 'justinbieber.asp', 'justinbiebershoes.asp','guccishoes.asp' etc. I tried deleting them but they are generated again. Can ...
Chetana Kestikar's user avatar
11 votes
2 answers

What are the SQL-injections issues of parameterized queries?

I've written some code to generate an SQL query in ASP classic. I'm not sure if it's secure or not: Set adoCon = Server.CreateObject("ADODB.Connection") adoCon.Open "Provider=Microsoft.Jet.OLEDB.4.0; ...
Flash's user avatar
  • 111