ASP.net中的高级安装程序服务器端序列号验证

Question

我有PHP和JSP中的文件，但我需要使用ASP.net

请那里的任何人转换它。

我在asp.net中使用过，它对于有效的许可证来说运行良好，并且使用代码601，但当使用602和消息时，我得到了所有html标签的页面源

<?php
// server response codes
define('LICENSE_VALID',   '601');
define('LICENSE_INVALID', '602');
// database connection parameters
$db_host = 'localhost:3306';
$db_user = 'root';
$db_pass = 'root123';
$db_name = 'mydb';
// client information table
$clients_tbl_name = 'clients';
$sn_tbl_col       = 'serial_no';
/**
 * Server HTTP response to the query issued by Advanced Installer serial     validation tool.
 */
function ServerResponse($is_valid, $posted_serial = '', $lang_id = 1033)
{
  $msg_sep = "n";
 // load error messages from your database, using "$lang_id" for localization (optional)
if($posted_serial == '')
return LICENSE_INVALID . $msg_sep . "Missing Serial Number !";
if($is_valid == true)
return LICENSE_VALID;
else
return LICENSE_INVALID . $msg_sep . "Serial Number: " . $posted_serial . ' is invalid !';  
}
// Variables POSTed by Advanced Installer serial validation tool to this web page: "sn", "languageid".
if(isset($_POST['sn']) && trim($_POST['sn']) != '')
{
 // get the serial number entered by the installing user in the "UserRegistrationDlg" dialog 
$sn = trim($_POST['sn']);
  // get the system language ID of the user's machine
  // (you can use this parameter to display a localized error message taken from your database)
 $languageid = (int) $_POST['languageid'];
// get the additional information entered by the installing user in the "UserRegistrationDlg" dialog 
$additional_information = $_POST['ai'];
// connect to database
$db_conn = @mysql_connect($db_host, $db_user, $db_pass);
if(!$db_conn)
{
// issue error response
echo ServerResponse(false, $sn, $languageid);
die();
}
// select target database
$db_selected = @mysql_select_db($db_name, $db_conn);
if(!$db_selected)
{
 // issue error response
 echo ServerResponse(false, $sn, $languageid);
 die();
}
// prepare SQL statement
$sn_query = "SELECT `". $sn_tbl_col ."` FROM `". $clients_tbl_name ."` WHERE `". $sn_tbl_col ."` = '" . mysql_escape_string($sn) . "'";
// execute query
$result = @mysql_query($sn_query, $db_conn);
// get result set size
if(@mysql_num_rows($result) == 0)
{
 // serial number NOT found in database => issue error response
 echo ServerResponse(false, $sn, $languageid);
 die();
 }
else
{
  // serial number was found in database => issue SUCCESS response
 echo ServerResponse(true, $sn, $languageid);
die();
}
}
else
{
 // issue error response
echo ServerResponse(false);
die();
}`enter code here`
?>

Answer 1

我也遇到了这个问题，它似乎是由我在PHP脚本中使用的一个不推荐使用的函数引起的。

在我的场景中，我使用了"mysql_escape_string（）"函数而不是"mysql_real_escape/string（））"函数，并且显示了一条由所有HTML标记包围的消息，告诉我该函数已被弃用。

希望这能有所帮助。