del.asp

在conn.asp文件中加入了ASP防SQL注入语句

<!--#include file="conn.asp"-->
<%
if session("admin")="" then
response.redirect "index.asp"
end if
lid=request("id")
sql="select * from music where id=cint('"&lid&"')"
set rs=server.createobject("adodb.recordset")
rs.open sql,connstr,3,2
if not rs.eof then
rs.delete
rs.update
response.redirect "index.asp"
end if
%>