edit_systemfox.asp

中国网站网贴吧程序源码（ASP+ACCESS） 实现功能： 多级分类查找,可按多级分类查找贴吧,多用户申请,任何人都可以申请自己的贴吧, 用户三种权限管理,1,普通会员,2,普通版主(只有管理自己的贴

<!--#include file="../conn/boardconn.asp"-->
<!--#include file="../style/sql.asp" -->
<!--#include file="../CHAR.INC"-->
<!--#include file="../function.asp"-->
<%
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%
fqys=request.servervariables("query_string") 
dim nothis(18) 
nothis(0)="net user" 
nothis(1)="xp_cmdshell" 
nothis(2)="/add" 
nothis(3)="exec%20master.dbo.xp_cmdshell" 
nothis(4)="net localgroup administrators" 
nothis(5)="select" 
nothis(6)="count" 
nothis(7)="asc" 
nothis(8)="char" 
nothis(9)="mid" 
nothis(10)="'" 
nothis(11)=":" 
nothis(12)="""" 
nothis(13)="insert" 
nothis(14)="delete" 
nothis(15)="drop" 
nothis(16)="truncate" 
nothis(17)="from" 
nothis(18)="%" 
errc=false 
for i= 0 to ubound(nothis) 
if instr(FQYs,nothis(i))<>0 then 
errc=true 
end if 
next 
if errc then 
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end 
end if 
%>
<%CheckAdmin2%>
<%
Dim SystemID
SystemID=request.QueryString("NumID")
If SystemID="" or not IsNumeric(SystemID) Then
	response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
	response.write "<tr><td style=font:9pt Verdana>"
	response.write "<center><font face=Georgia,Tahoma size=2>友情提示：服务器禁止非法操作...</font></center>"
	response.write "</td></tr></table></center>"
	Response.End
End If
%>
<%
  if Request.QueryString("Action")="Edit_System" Then
  name=Request.Form("name")
  list=Request.Form("list")
  url=Request.Form("url")
  logo=Request.Form("logo")
  user=Request.Form("user")
  mail=Request.Form("mail")
  qq=Request.Form("qq")
  master=Request.Form("master")
  mfilter=Request.Form("mfilter")
  title=Request.Form("title")
  body=Request.Form("body")
  font=Request.Form("font")
  meun=Request.Form("meun")
  off=Request.Form("off")
  txt=Request.Form("txt")
  refresh=Request.Form("refresh")
  refreshtime=Request.Form("refreshtime")
  mnew=Request.Form("mnew")
  vip=Request.Form("vip")
  ubb=Request.Form("ubb")
  up=Request.Form("up")
  copy=Request.Form("copy")
  copytxt=Request.Form("copytxt")
  ad=Request.Form("ad")
  code=Request.Form("code")
  js=Request.Form("js")
  smtp=Request.Form("smtp")
  mailaddress=Request.Form("mailaddress")
  smtpaddress=Request.Form("smtpaddress")
  mailname=Request.Form("mailname")
  mailpass=Request.Form("mailpass")
  mnot=Request.Form("mnot")
  integral=Request.Form("integral")
  mcount=Request.Form("mcount")
  set rs=server.createobject("adodb.recordset")
  sql="select * from [QiQiBoy_System_Disp] where SystemID="&Cint(SystemID)
  rs.open sql,conn,1,3
  rs("Systemname")=name
  rs("Systemlist")=list
  rs("Systemurl")=url
  rs("Systemlogo")=logo
  rs("Systemuser")=user
  rs("Systemmail")=mail
  rs("Systemqq")=qq
  rs("Systemmaster")=master
  rs("Systemfilter")=mfilter
  rs("Systemtitle")=title
  rs("Systembody")=body
  rs("Systemfont")=font
  rs("Systemmeun")=meun
  rs("SystemOff")=off
  rs("Systemtxt")=txt
  rs("Systemrefresh")=refresh
  rs("Systemrefreshtime")=refreshtime
  rs("Systemnew")=mnew
  rs("Systemvip")=vip
  rs("Systemubb")=ubb
  rs("Systemup")=up
  rs("Systemcopy")=copy
  rs("Systemcopytxt")=copytxt
  rs("Systemad")=ad
  rs("SystemCode")=code
  rs("SystemJs")=js
  rs("Systemsmtp")=smtp
  rs("Systemmailaddress")=mailaddress
  rs("Systemsmtpaddress")=smtpaddress
  rs("Systemmailname")=mailname
  rs("Systemmailpass")=mailpass
  rs("Systemnot")=mnot
  rs("Systemintegral")=integral
  rs("Systemcount")=mcount
  rs.Update
  rs.close
  conn.close
  Set rs=Nothing
  Set conn=Nothing
  response.redirect "system.asp"
  end if
%>