<% '------------------sql zhuru '-----------防注入代码---------------- '--------定义部份------------------ 'Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr '自定义需要过滤的字串,用 "|||" 分隔 Fy_In = "'|||;|||and|||exec|||insert|||select|||delete|||update|||count|||*|||%|||chr|||mid|||master|||truncate|||char|||declare" '---------------------------------- Fy_Inf = split(Fy_In,"|||") '--------POST部份------------------ If Request.Form<>"" Then For Each Fy_Post In Request.Form For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If '---------------------------------- '--------GET部份------------------- If Request.QueryString<>"" Then For Each Fy_Get In Request.QueryString For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If ''''''''''-----------sql end %> 更多文章列表
<% if request("key")<>"" then pkey = nosb(trim(request("key"))) else pkey = "null" end if %>
更多相关文章列表。。。。
 
<% call searchresult(pkey) %>
 
 
<% sub searchresult(pkey) adoconn csql="select a.cdoc_id,a.cdoc_type,a.ctitle ctitle,a.cpush_date,a.cpicture,c.ckey" csql = csql & " FROM tbl_article a left outer join tbl_article_pic c on a.cdoc_id=c.cdoc_id " csql = csql & "where right(a.cdoc_id,2)='01' and c.ckey like '%"&pkey&"%' " csql = csql & "and a.cChanNelCode='14' " csql = csql & "order by a.cdoc_id desc" udc_rs.open csql,udc_conn,3 'response.write csql if not udc_rs.eof then page = request("page") if isnull(page) or page="" then page=1 udc_rs.pagesize=40 iCount=udc_rs.recordcount pages=(icount+udc_rs.pagesize-1)\udc_rs.pagesize if int(page) > int(pages) then page = 1 udc_rs.absolutepage=page i = 0 str = str & ""&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf while not udc_rs.eof and i < udc_rs.pagesize if i > 0 and i mod 5 = 0 then str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf end if str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf udc_rs.movenext i = i + 1 wend str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "
"&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "
·" & udc_rs("ctitle") & ""&udc_rs("cPush_Date")&"
"&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "
"&vbcrlf parastr = "key="&pkey str = str & changepage(pages,page,parastr) str = str & "
"&vbcrlf response.write str call changepage(pages,page,parastr) else response.write "
暂时没有找到相应的文章。。。。
" end if udc_rs.close set udc_rs=nothing udc_conn.close set udc_conn=nothing end sub function changepage(pages,page,parastr) str = "" 'str = str & ""&vbcrlf 'str = str & " "&vbcrlf 'str = str & " "&vbcrlf 'str = str & " "&vbcrlf 'str = str & "
"&vbcrlf str = str & "
" if page > 1 then str = str & "上一页"&vbcrlf else str = str & "上一页"&vbcrlf end if if int(page) < int(pages) then str = str & "下一页"&vbcrlf else str = str & "下一页"&vbcrlf end if str = str & "
页次" & page & "/" & pages & " 选择页码：" & vbcrlf if int(page)>((page-1)\10)*10 and page>10 then str = str & "上十页"&vbcrlf end if 'response.write pages if ((int(page)-1)\10)*10 + 10 >= pages then endpage = pages else endpage = ((int(page)-1)\10)*10 + 10 end if for i = ((int(page)-1)\10)*10+1 to endpage if i = int(page) then str = str & ""&i&" "&vbcrlf else str = str & ""&i&" "&vbcrlf end if next if endpage <> pages then str = str & "下十页"&vbcrlf end if str = str & "
" 'str = str & "
"&vbcrlf changepage = str end function %>