view.asp
来自「默认管理员:etaodu 密码:etaodu 陶都房市++介绍: 」· ASP 代码 · 共 134 行
ASP
134 行
<!--#include file="char.asp"-->
<!--#include file="conn.asp"-->
<%
id=Request.Querystring("id")
If id ="" then
Response.Write("<script language=javascript>alert('非法访问');window.location.href='index.asp'</script>")
end if
if instr(id,"'") or instr(id,"select") or instr(id,"in") or instr(id,"from") or instr(id,"len") or instr(id,"where") or instr(id,"or") or instr(id,"and") then
Response.Write("<script language=javascript>alert('你想做什么?');window.location.href='check.htm'</script>")
Response.End
end if '在这里过滤TMD的不良字符
conn.execute("update imgbook set click=click+1 where ID=" & id)
sql="select * from imgbook where ID="&id
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
if rs.eof then
Response.Write("对不起。没有此编号的图片!!!")
Response.end
end if
%>
<!--#include file=../inc/top1.asp -->
<HTML><HEAD><TITLE>__陶都房市____陶都掠影_____</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<LINK
href="../images/css.css" rel=stylesheet type=text/css>
<LINK
href="../images/realty.css" rel=stylesheet type=text/css>
<META content="Microsoft FrontPage 5.0" name=GENERATOR></HEAD>
<BODY class=bg1 text=#000000 bgColor=#cacbc1 leftMargin=0 topMargin=0>
<TABLE height=1 cellSpacing=0 cellPadding=0 width=750 align=center border=0>
<TBODY>
<TR>
<TD bgColor=#ffffff></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center border=0>
<TBODY>
<TR>
<TD bgColor=#ffffff height=5></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center bgColor=#ffffff
border=0>
<TBODY>
<TR>
<TD vAlign=top align=center width=538 height=300>
<table width="98%" border="0">
<tr>
<td> </td>
</tr>
<tr>
<td align="center"><table width="680" height="156" align="center" cellpadding="4" cellspacing="0">
<tr>
<td height="40" align="center"><br>
<b><%=rs("title")%></b><br>
<br> 上传日期:<%=rs("updatetime")%><br>
<br> 本图片被浏览<%=rs("click")%>次</td>
</tr>
<tr>
<td align="center"><table width="100%" border="0">
<tr>
<td align="center">
<%
img=rs("news_content")
if instr(img,"[img]") then
img = Replace(img, "[img]","<img src=")
img = Replace(img, "[/img]"," onload=""javascript:if(this.width>500)this.width=500"">")
else
img = Replace(img, "[uploadimg]","<img src=upload/")
img = Replace(img, "[/uploadimg]"," onload=""javascript:if(this.width>500)this.width=500"">")
end if
Response.Write(img)
%>
</td>
<td align="center"> </td>
</tr>
</table></td>
</tr>
<tr>
<td height="2"> </td>
</tr>
</table>
<table width="594" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td align="right"> </td>
</tr>
<tr>
<td height="13"><strong>图片相关说明</strong>:</td>
</tr>
<tr>
<td><%=ubbcode(rs("guestcontent"))%></td>
</tr>
<tr>
<td align="center">
<%
rsclose()
set rs1=server.CreateObject("Adodb.recordset")
sql1="select ID from imgbook where ID="&Request.Querystring("id")-1
rs1.open sql1,conn,1,1
if not rs1.bof then
Response.Write("<a href=view.asp?id="& Request.Querystring("id")-1 &">上一张图片</a> ")
end if
rs1.close
sql1="select ID from imgbook where ID="&Request.Querystring("id")+1
rs1.open sql1,conn,1,1
if not rs1.bof then
Response.Write("<a href=view.asp?id=" & Request.Querystring("id")+1 & ">下一张图片</a>")
end if
rs1.close
set rs1=nothing
%>
</td>
</tr>
</table></td>
</tr>
</table>
</TD>
</TR>
</TBODY>
</TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center bgColor=#ffffff
border=0>
<TBODY>
<TR>
<TD> </TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center bgColor=#ffffff
border=0>
<TBODY>
<TR>
<TD bgColor=#ffffff height=1></TD>
</TR>
</TBODY>
</TABLE>
</BODY></HTML>
<!--#include file=../inc/bottom.asp -->
⌨️ 快捷键说明
复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?