<% String currenturl = request.getRequestURI()+(request.getQueryString()==null?"":("?"+request.getQueryString())); if (sql_inj.sql_inj(currenturl)){ //判断url及参数中是否包含注入代码，是的话就跳转到某页。 response.sendRedirect("error.jsp"); return; } //out.println(currenturl); %>