📄 edit_ad.asp
字号:
<!--#include file="../conn/boardconn.asp"-->
<!--#include file="../style/sql.asp" -->
<!--#include file="../CHAR.INC"-->
<!--#include file="../function.asp"-->
<%
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%
fqys=request.servervariables("query_string")
dim nothis(18)
nothis(0)="net user"
nothis(1)="xp_cmdshell"
nothis(2)="/add"
nothis(3)="exec%20master.dbo.xp_cmdshell"
nothis(4)="net localgroup administrators"
nothis(5)="select"
nothis(6)="count"
nothis(7)="asc"
nothis(8)="char"
nothis(9)="mid"
nothis(10)="'"
nothis(11)=":"
nothis(12)=""""
nothis(13)="insert"
nothis(14)="delete"
nothis(15)="drop"
nothis(16)="truncate"
nothis(17)="from"
nothis(18)="%"
errc=false
for i= 0 to ubound(nothis)
if instr(FQYs,nothis(i))<>0 then
errc=true
end if
next
if errc then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%CheckAdmin1%>
<%
Dim ID
ID=request.QueryString("NumID")
If ID="" or not IsNumeric(ID) Then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
Response.End
End If
%>
<html>
<head>
<title></title>
<meta http-equiv="Content-Type" content="text/html; charset=GB2312">
<link href="../style/style.css" rel="stylesheet" type="text/css">
</head>
<script language="JavaScript">
<!--
function form_onsubmit() {
if (document.form.img.value=="")
{
alert("友情提示!\n\n请填写广告图片...")
document.form.img.focus()
return false
}
else if (document.form.http.value=="")
{
alert("友情提示!\n\n请填写广告连接地址...")
document.form.http.focus()
return false
}
else if (document.form.list.value=="")
{
alert("友情提示!\n\n请填写广告介绍...")
document.form.list.focus()
return false
}
else if (document.form.num.value=="")
{
alert("友情提示!\n\n请填写排列顺序...")
document.form.num.focus()
return false
}
}
// -->
</script>
<body topmargin="0" leftmargin="0">
<div align="center"><center>
<%
Set rs = Server.CreateObject("ADODB.Recordset")
Sql="select * from [QiQiBoy_Ad_Disp] where ID="&Cint(ID)
Set rs=conn.execute(Sql)
%>
<form id=form name=Form method="POST" action="edit_adfox.asp?Action=Edit_Ad&NumID=<%Response.Write(rs(0))%>" onsubmit="return form_onsubmit()">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td width="100%" height="20" bgcolor="#96C5DE" align=center colspan="2"><font color="white"><b>编 辑 随 帖 广 告</b></font></td>
</tr>
<tr>
<td width="100%" height="20" align=center colspan="2"></td>
</tr>
<tr>
<td width="15%" height="25" align="right">广告图片：</td>
<td width="85%"><input class=input type="text" name="img" size="40" value="<%Response.Write(rs(2))%>"> *</td>
</tr>
<tr>
<td width="15%" height="25" align="right">连接地址：</td>
<td width="85%"><input class=input type="text" name="http" size="40" value="<%Response.Write(rs(3))%>"> *</td>
</tr>
<tr>
<td width="15%" height="25" align="right">广告介绍：</td>
<td width="85%"><input class=input type="text" name="list" size="60" value="<%Response.Write(rs(4))%>"> *</td>
</tr>
<tr>
<td width="15%" height="25" align="right">排列顺序：</td>
<td width="85%"><input class=input type="text" name="num" size="10" value="<%Response.Write(rs(1))%>"> *</td>
</tr>
<tr>
<td width="15%" height="25" align="right"></td>
<td width="85%"><input class=input1 type="submit" value="编辑随帖广告" name="Submit"> <input class=input1 type="reset" value="擦除重填" name="Submit2"></td>
</tr>
</table>
</form>
<%
rs.close
Set rs=NOTHING
conn.Close
set conn=nothing
%>
</center>
</div>
</body>
</html>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -