<%
set conn=Server.CreateObject("ADODB.Connection")
conn.Open"driver={microsoft access driver (*.mdb)};dbq="&server.mappath("/db/db.mdb")
Set rs=server.CreateObject("adodb.recordset")
Function safein(Url)
server_v1 = CStr(Request.ServerVariables("HTTP_REFERER"))
server_v2 = CStr(Request.ServerVariables("SERVER_NAME"))
If Mid(server_v1, 8, Len(server_v2))<>server_v2 Then
response.Write "<script>alert('警告!你正在从外部提交数据!!请立即终止!!\n你的IP已经被记录,如果再次来');</script>"
Response.Redirect Url
End If
End Function
Function fpage(str)
s=Split(str,"|")
s2=""
For i=0 To UBound(s)
s2=s2&"&"&s(i)&"="&request(s(i))
next
response.write "<table width=""100%"" cellpadding=0 cellspacing=0 border=0>"
response.write " <tr>"
response.write " <td align=""center"" width=""95%""> 信息总数:"&rs.recordcount&"个 页次:"&page&"/"&rs.pagecount&"页"
If page<=1 Then
response.write " 首 页 上一页 "
Else
response.write " <a href=""?page=1"&s2&"""><font color='#ff0000'>首 页</font></a> <a href=""?page="&(page-1)&s2&"""><font color='#ff0000'>上一页</font></a> "
End If
If page>=rs.pagecount Then
response.write "下一页 尾 页 "
Else
response.write "<a href=""?page="&(page+1)&s2&"""><font color='#ff0000'>下一页</font></a> <a href=""?page="&rs.pagecount&s2&"""><font color='#ff0000'>尾 页</font></a>"
End If
response.write "</td> "
response.write " <td width=""5%""></td>"
response.write " </tr>"
response.write "</table>"
End function
'这是过滤非法字符函数
Function SafeRequest(ParaName)
Dim ParaValue
ParaValue=Request(ParaName)
if IsNumeric(ParaValue) = True then
SafeRequest=ParaValue
exit Function
elseIf Instr(LCase(ParaValue),"select ") > 0 or Instr(LCase(ParaValue),"insert ") > 0 or Instr(LCase(ParaValue),"delete from") > 0 or Instr(LCase(ParaValue),"count(") > 0 or Instr(LCase(ParaValue),"drop table") > 0 or Instr(LCase(ParaValue),"update ") > 0 or Instr(LCase(ParaValue),"truncate ") > 0 or Instr(LCase(ParaValue),"asc(") > 0 or Instr(LCase(ParaValue),"mid(") > 0 or Instr(LCase(ParaValue),"char(") > 0 or Instr(LCase(ParaValue),"xp_cmdshell") > 0 or Instr(LCase(ParaValue),"exec master") > 0 or Instr(LCase(ParaValue),"net localgroup administrators") > 0 or Instr(LCase(ParaValue)," and ") > 0 or Instr(LCase(ParaValue),"net user") > 0 or Instr(LCase(ParaValue)," or ") > 0 Or InStr(LCase(ParaValue),"""")>0 Or InStr(LCase(ParaValue),"'")>0 then
Response.Write "请不要在函数中加入非法字符!"
Response.end
else
SafeRequest=ParaValue
End If
End function
%>