📄 showmessage.aspx
字号:
<%@import namespace='system.data'%>
<%@import namespace='system.data.oledb'%>
<%if session("lshdic")<>"" then session("lshdic")="yes" '在次赋予 SESSION 20分钟生命%>
<%
dim conn1=ConfigurationSettings.AppSettings("databaseconn") & server.mappath(ConfigurationSettings.AppSettings("databasepath")) '得到web.config中数据库的完整路径
err.clear()
dim theid=request.querystring("messageid")
if theid="" then response.write("<script>alert('无效路径的引入');opener=null;close()</script>"):response.end
on error resume next
theid=cint(theid)
if err.number<>0 then response.write("<script>alert('拒绝注入');opener=null;close()</script>"):response.end
if theid<1 then response.write("<script>alert('拒绝实验');opener=null;close()</script>"):response.end
dim link1=new oledbconnection(conn1)
link1.open()
dim com1=new oledbcommand("select title,body,noopen,reply,dates from table1 where id=" & theid & " and link=0",link1)
dim rs=com1.executereader()
if not rs.read() then response.write ("<script>alert('记录不存在');opener=null;close()</script>"):response.end
dim title1=rs.item("title"),dates1=rs.item("dates"),body1=rs.item("body"),body2 as string
if rs.item("noopen")=true and session("lshdic")="" then body1="该留言内容仅有管理员（站长）能够浏览！"
if rs.item("reply")=true then '已回复时
com1=new oledbcommand("select top 1 body,dates from table1 where link=" & theid & " order by dates desc",link1)
rs.close()
rs=com1.executereader()
if rs.read() then body2="<p><b style='color:red'>站长回复于(" & rs.item("dates") & "),时差约:" & formatnumber(datediff("n",dates1,rs.item("dates"))/60,2) & "小时</b><p>" & replace(replace(server.HTMLEncode(replace(rs.item("body"),"&$39;","'")),vbcrlf,"<br>")," "," ")
end if
rs.close():link1.close():rs=nothing:com1=nothing:link1=nothing
%>
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html; Charset=gb2312"/>
<META name="GENERATOR" content="网络程序员伴侣(Lshdic)2004_星钻超爽版"/>
<TITLE><%=server.HTMLEncode(replace(title1,"&$39;","'"))%></TITLE>
<style>
*{font-size:12px;font-family:宋体}
a{color:maroon;text-Decoration:none;}
a:hover{color:blue;text-Decoration:underline;}
</style>
</HEAD>
<BODY style='margin:0;border:0'>
<TABLE rules="all" bordercolor='menu' width="100%" height="100%" cellspacing="0" cellpadding="5" style='border-Collapse:collapse;'>
<tr>
<td bgcolor="#619CE7" style='color:white;' height=20>
<center><b>标题:</b><%=server.HTMLEncode(replace(title1,"&$39;","'"))%></center>
</td>
</tr>
<tr><Td style='padding:0;padding-left:5;'>
<div style='width:100%;height:100%;word-Break:break-all;scrollbar-shadow-color:white;scrollbar-base-color:#619CE7;scrollbar-arrow-color:blue;overflow-Y:scroll;padding-top:5;padding-right:5;line-height:1.3;'>
<b style='color:red'>留言时间于(<%=dates1%>):</b><p>
<%=replace(replace(server.HTMLEncode(replace(body1,"&$39;","'")),vbcrlf,"<br>")," "," ")%>
<%=body2%>
</div>
</td></tr></table>
</body>
</html>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -