<% '------------------sql zhuru '-----------防注入代码---------------- '--------定义部份------------------ 'Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr '自定义需要过滤的字串,用 "|||" 分隔 Fy_In = "'|||;|||and|||exec|||insert|||select|||delete|||update|||count|||*|||%|||chr|||mid|||master|||truncate|||char|||declare" '---------------------------------- Fy_Inf = split(Fy_In,"|||") '--------POST部份------------------ If Request.Form<>"" Then For Each Fy_Post In Request.Form For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If '---------------------------------- '--------GET部份------------------- If Request.QueryString<>"" Then For Each Fy_Get In Request.QueryString For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If ''''''''''-----------sql end %> <% if request("cpositioncode")<>"" then cpositioncode = nosb(trim(request("cpositioncode"))) else cpositioncode = "1533" end if if cpositioncode="1537" then response.write "刀片_双核心_64位_网游_RAID_集群_热插拔_双机_服务器学院_服务器专区_IT168.COM" elseif cpositioncode="1536" then response.write "CPU_内存_主板_硬盘_机箱_电源_风扇_RAID_SCSI_服务器学院_服务器专区_IT168.COM" elseif cpositioncode="1540" then response.write "代理_流媒体_共享_远程访问_宽带接入_功能服务_服务器学院_服务器专区_IT168.COM" else response.write "服务器导购_维护_评测_技术_架站_应用_存储_Web_Ftp_DNS_Mail_服务器专区_IT168.COM" end if %>
<% select case cpositioncode Case "1533" doctypename = "操作系统" Case "1534" doctypename = "架站技术" Case "1535" doctypename = "数据库应用" Case "1536" doctypename = "硬件技术" Case "1537" doctypename = "热点技术" Case "1538" doctypename = "品牌技术" Case "1539" doctypename = "服务器安全" Case "1540" doctypename = "应用服务器" Case "1541" doctypename = "存储技术" Case "1542" doctypename = "在线教程" Case "1551" doctypename = "Windows系统" Case "1552" doctypename = "Linux系统" Case "1553" doctypename = "UNIX系统" Case "1554" doctypename = "Web系统" Case "1555" doctypename = "Mail系统" Case "1556" doctypename = "Ftp系统" Case "1557" doctypename = "数据库软件" Case "1558" doctypename = "管理工具" Case "1559" doctypename = "必知术语-服务器" Case "1560" doctypename = "必知术语-小型机" Case "1561" doctypename = "必知术语-工作站" Case "1562" doctypename = "必知术语-功能服务器" Case "1563" doctypename = "必知术语-服务器配件" Case "1564" doctypename = "必知术语-服务器软件" Case "1565" doctypename = "必知术语-存储" Case "1566" doctypename = "必知术语-安全" Case "1567" doctypename = "必知术语-网络基础" Case "1568" doctypename = "必知术语-其他" Case "1569" doctypename = "必知硬件-服务器" Case "1570" doctypename = "必知硬件-CPU" Case "1571" doctypename = "必知硬件-内存" Case "1572" doctypename = "必知硬件-硬盘" Case "1573" doctypename = "必知硬件-机箱" Case "1574" doctypename = "必知硬件-电源" Case "1575" doctypename = "必知硬件-风扇" Case "1576" doctypename = "必知硬件-RAID卡" Case "1577" doctypename = "必知硬件-SCSI卡" Case "1578" doctypename = "必知硬件-主板" Case Else cpositioncode = "1533" doctypename = "操作系统" End Select %>
<%=doctypename%>
 
<%call searchresult(cpositioncode)%>
 
 
<% sub searchresult(sqlpara) adoconn csql = "select a.cdoc_id,a.cdoc_type,p.ctitle, p.cdoccode, p.cmemo ,p.cpositioncode,p.cpushdate" csql = csql & " FROM tbl_article a right outer join tbl_position_article p on a.cdoc_id=p.cdoccode " csql = csql & "WHERE p.cpositioncode = '"&sqlpara&"' and right(a.cdoc_id,2)='01' " csql = csql & "and p.cPushDate <= CONVERT(char(10), GETDATE(), 20) " csql = csql & "order by p.cpushdate desc, p.corder desc,p.cdoccode desc" udc_rs.open csql,udc_conn,3 'response.write csql if not udc_rs.eof then page = request("page") if isnull(page) or page="" then page=1 udc_rs.pagesize=40 iCount=udc_rs.recordcount pages=(icount+udc_rs.pagesize-1)\udc_rs.pagesize if int(page) > int(pages) then page = 1 udc_rs.absolutepage=page i = 0 str = str & ""&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf while not udc_rs.eof and i < udc_rs.pagesize if i > 0 and i mod 5 = 0 then str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf end if str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf udc_rs.movenext i = i + 1 wend str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "
"&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "
·" & udc_rs("ctitle") & ""&udc_rs("cPushDate")&"
"&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "
"&vbcrlf parastr = "cpositioncode="&sqlpara str = str & changepage(pages,page,parastr) str = str & "
"&vbcrlf response.write str call changepage(pages,page,parastr) else response.write "
暂时没有找到相应的文章。。。。
" end if udc_rs.close set udc_rs=nothing udc_conn.close set udc_conn=nothing end sub function changepage(pages,page,parastr) str = "" 'str = str & ""&vbcrlf 'str = str & " "&vbcrlf 'str = str & " "&vbcrlf 'str = str & " "&vbcrlf 'str = str & "
"&vbcrlf str = str & "
" if page > 1 then str = str & "上一页"&vbcrlf else str = str & "上一页"&vbcrlf end if if int(page) < int(pages) then str = str & "下一页"&vbcrlf else str = str & "下一页"&vbcrlf end if str = str & "
页次" & page & "/" & pages & " 选择页码：" & vbcrlf if int(page)>((page-1)\10)*10 and page>10 then str = str & "上十页"&vbcrlf end if 'response.write pages if ((int(page)-1)\10)*10 + 10 >= pages then endpage = pages else endpage = ((int(page)-1)\10)*10 + 10 end if for i = ((int(page)-1)\10)*10+1 to endpage if i = int(page) then str = str & ""&i&" "&vbcrlf else str = str & ""&i&" "&vbcrlf end if next if endpage <> pages then str = str & "下十页"&vbcrlf end if str = str & "
" 'str = str & "
"&vbcrlf changepage = str end function %>