index.asp

在conn.asp文件中加入了ASP防SQL注入语句

                          <a href="add.asp"><font color="#725446">添加歌曲</font></a><font color="#725446">&nbsp; 
                          &nbsp; <a href="quit.asp">管理员退出</a>&nbsp; 
                          <%end if%>
                          </font> <font color="#725446"></font></div></td>
                      <td width="491" valign="top"> <div align="center"> 
                          <hr width=100% size="1" color="#990000">
                          <%         
set rs = server.createobject("adodb.recordset")                                                                     
sql = "select * from music order by id desc"                    
rs.open sql,conn,1,1                                      
if rs.eof then                            
response.write "<p align=center><font color=red>暂无歌曲</font></p>"                           
response.end                            
else                            
const maxperpage=20                            
dim currentpage                            
rs.pagesize=maxperpage                            
currentpage=request.querystring("pageid")                            
if currentpage="" then                            
currentpage=1                            
elseif currentpage<1 then                            
currentpage=1                            
else                            
currentpage=clng(currentpage)                            
	if currentpage > rs.pagecount then                            
	currentpage=rs.pagecount                            
	end if                            
end if                            
                            
if not isnumeric(currentpage) then                            
currentpage=1                            
end if                            
dim totalput,n                            
totalput=rs.recordcount                            
if totalput mod maxperpage=0 then                            
n=totalput\maxperpage                            
else                            
n=totalput\maxperpage+1                            
end if                            
if n=0 then                            
n=1                            
end if                            
rs.move(currentpage-1)*maxperpage          
%>
                          <table border="0" cellpadding="0" cellspacing="0" width="100%" bordercolorlight="#393939" bordercolordark="#cccccc">
                            <tr bordercolor="DAE9FE"> 
                              <td width="7%" height="20" align="center" bgcolor="DAE9FE"><font color="#000000">编号</font></td>
                              <td width="35%" height="25" align="center" bgcolor="DAE9FE"> 
                                <p align="center"><font color="#000000"><b>歌 曲 
                                  名 字</b></font></p></td>
                              <center>
                                <td width="10%" height="20" align="center" bgcolor="DAE9FE"> 
                                  <font color="#000000">试听</font> </td>
                                <td width="17%" height="20" align="center" bgcolor="DAE9FE"> 
                                  <font color="#000000">歌手</font> </td>
                                <td width="14%" height="20" align="center" bgcolor="DAE9FE"><font color="#000000">点击</font></td>
                                <td width="17%" height="20" align="center" bgcolor="DAE9FE"><font color="#000000">上传时间</font></td>
                              </center>
                            </tr>
                            <%                                         
i=0                         
w=1                            
do while i< maxperpage and not rs.eof                                           
%>
                            <FORM action=playsong.ASP name=form2 
                      onsubmit="javascript:return lbsong();" target=lbsong>
                              <tr bgcolor="#FFFFFF"> 
                                <td width="7%" height="20" align="center"><font color="#000000"><%=w%></font></td>
                                <td width="35%" height="25"> <font color="#000000"> 
                                  ·</font> <font color="#000000"><A onClick="return newpage(this.href);"> 
                                  <font color="#000000"> 
                                  <% if len(rs("name"))>16 then %>
                                  </font> <%=Left(rs("name"),16)%>... 
                                  <% else %>
                                  <%=rs("name")%> 
                                  <% end if %>
                                  </A> 
                                  <%if not rs("date") < date then%>
                                  &nbsp; 
                                  <%end if%>
                                  <%if session("admin")<>"" then%>
                                  &nbsp;&nbsp;<a href="del.asp?id=<%=rs("id")%>">删除</a> 
                                  <%end if%>
                                  </font></td>
                                <td width="10%" height="20" align="center"><font color="#000000"><A HREF="play.asp?id=<%=rs("id")%>" onClick="return newpage(this.href);"><img border="0" src="images/listen.gif"></A></font></td>
                                <td width="17%" height="20" align="center"><font color="#000000"><%=rs("who")%></font></td>
                                <td width="14%" height="20" align="center"><font color="#000000"><%=rs("hits")%></font></td>
                                <td width="17%" height="20" align="center"><font color="#000000"><%=rs("date")%></font></td>
                              </tr>
                              <%                        
i=i+1                             
w=w+1                                            
rs.movenext                                     
loop                    
end if                                       
rs.Close                                      
%>
                              <tr> 
                                <td height="25" colspan="6" align="center" bgcolor="DAE9FE"> 
                                  <p align="center"><font color="#000000">页数：<%=currentpage%>/ 
                                    <% =n%>
                                    <%k=currentpage                                                                                                                  
   	if k<>1 then%>
                                    <a href="index.asp?pageid=1">首页</a> <a href="index.asp?pageid=<%=k-1%>">上一页</a> 
                                    <%else%>
                                    首页&nbsp;上一页 
                                    <%end if%>
                                    <%if k<>n then%>
                                    <a href="index.asp?pageid=<%=k+1%>">下一页</a> 
                                    <a href="index.asp?pageid=<%=n%>">尾页</a> 
                                    <%else%>
                                    下一页&nbsp;尾页 
                                    <%end if%>
                                    共<%=totalput%>首</font></p></td>
                              </tr>
                            </form>
                          </table>
                          <hr width=100% size="1" color="#990000">
                        </div></td>
                    </tr>
                  </table></td>
              </tr>
            </table>
            <table width="100%" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td height="6"></td>
              </tr>
            </table>
            <table width="98%" height="2" border="0" align="center" cellpadding="0" cellspacing="0">
              <tr> 
                <td bgcolor="#D4D4D4"></td>
              </tr>
              <tr> 
                <td bgcolor="#FFFFFF"></td>
              </tr>
            </table>
            <table width="700" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td align="center" height="59" class="td20"> 
                  <table width="500" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td align="center" height="20" colspan="2"><font face="Verdana, Arial, Helvetica, sans-serif">Copyright 
                        &copy; 2004-2005 <font color="#FF0000"><b>2</b></font><font color="#009900">v</font><font color="#0066FF"><b>g</b></font><font color="#FF6600">.net</font> 
                        Inc. All rights reserved.</font> 凌乱设计 版权所有</td>
                    </tr>
                    <tr> 
                      <td align="right"><img src="images/copyright.jpg" width="198" height="36">&nbsp;&nbsp;</td>
                      <td><font face="Verdana, Arial, Helvetica, sans-serif">E-Mail:[e-mail]<br>
                        <a target=blank href=http://wpa.qq.com/msgrd?V=1&Uin=569222&Site=凌乱设计&Menu=yes><img border="0" SRC=http://wpa.qq.com/pa?p=1:569222:1 alt="点击给站长发消息"></a>
 
</font> <script src="http://www.2vg.net/star/count.asp?style=0">
</script></td>
                    </tr>
                  </table>
                </td>
              </tr>
            </table>
          </td>
          <td valign=top background=images/rbg_blue.jpg width="7">&nbsp;</td>
        </tr>
      </table>
    </TD>
    <TD class=rtbg width="154">&nbsp;</TD>
  </TR></TABLE>
</body>
</html>