servervariables >
all-http-headers

Display all HTTP Headers

标头

Display all HyperText Transfer Protocol
(HTTP) Server Headers

<%
for each header in Request.ServerVariables
response.write header&"="&Request.ServerVariables(header)&"<br>"
next
%>

-------- IIS Security  ------

IIS received bad header might damage IIS4 IIS5

Cookies sent by header

-------- IIS Security 网络安全 ------
IIS 会针对收到的 HTTP header 作解析，
并检查作为区分 header 的分隔字符，
小心可能有刻意设计的恶意 HTTP header 
使得 IIS 做出错误的判断，而执行 
HTTP header 中刻意设计的指令。
----------------------------------

Cookies 是经由HTTP Header 来传送。

ALL_HTTP=HTTP_CONNECTION:Keep-Alive HTTP_ACCEPT:*/* 
HTTP_ACCEPT_ENCODING: ___ 
HTTP_ACCEPT_LANGUAGE: ___ HTTP_COOKIE:___; 
domain= HTTP_HOST:link.ezer.com 
HTTP_USER_AGENT:Mozilla/4.0 
ALL_RAW=Connection: Keep-Alive Accept: */* 
Accept-Encoding: __ Accept-Language: __ Cookie: __; 
domain= Host: link.ezer.com User-Agent: Mozilla/4.0  
APPL_MD_PATH=
APPL_PHYSICAL_PATH=c:AUTH_PASSWORD=
AUTH_TYPE=
AUTH_USER=
CERT_COOKIE=
CERT_FLAGS=
CERT_ISSUER=
CERT_KEYSIZE=
CERT_SECRETKEYSIZE=
CERT_SERIALNUMBER=
CERT_SERVER_ISSUER=
CERT_SERVER_SUBJECT=
CERT_SUBJECT=
CONTENT_LENGTH=
CONTENT_TYPE=
GATEWAY_INTERFACE=
HTTPS=
HTTPS_KEYSIZE=
HTTPS_SECRETKEYSIZE=
HTTPS_SERVER_ISSUER=
HTTPS_SERVER_SUBJECT=
INSTANCE_ID=
INSTANCE_META_PATH=
LOCAL_ADDR=---.---.---.--- IP
LOGON_USER=
PATH_INFO=/index.asp
PATH_TRANSLATED=c:QUERY_STRING=
REMOTE_ADDR=---.---.---.---
REMOTE_HOST=---.---.---.--- IP
REMOTE_USER=
REQUEST_METHOD=GET
SCRIPT_NAME=/index.asp
SERVER_NAME=link.ezer.com
SERVER_PORT=80
SERVER_PORT_SECURE=0
SERVER_PROTOCOL=HTTP/1.1
SERVER_SOFTWARE=
URL=/index.asp
HTTP_CONNECTION=Keep-Alive
HTTP_ACCEPT=
HTTP_ACCEPT_ENCODING=
HTTP_ACCEPT_LANGUAGE=
HTTP_COOKIE=
HTTP_HOST=link.ezer.com
HTTP_USER_AGENT=Mozilla/4.0

----- tips google ----
确保您的网络服务器支持 If-Modified-Since HTTP 标头。
通过该功能，您的网络服务器可以告诉
 Google 自上次抓取您的网站以来，
内容是否已发生变化。