var url = location.search;
var re=/^\?(.*)(select%20|insert%20|delete%20from%20|count\(|drop%20table|update%20|truncate%20|asc\(|mid\(|char\(|xp_cmdshell|exec%20master|net%20localgroup%20administrators|\"|:|net%20user|\'|%20or%20)(.*)$/gi;
var re1=/^\?(.*)(select |insert |delete from |count\(|drop table|update |truncate |asc\(|mid\(|char\(|xp_cmdshell|exec master|net localgroup administrators|\"|:|net user|\'| or )(.*)$/gi;
var e = re.test(url);
var e1 = re1.test(url);
if(e || e1) {
alert("Permission denied!");
location.href="./../../error.htm";
}