view.asp

来自「默认管理员:etaodu 密码:etaodu 陶都房市++介绍: 」· ASP 代码 · 共 134 行

ASP
134
字号
<!--#include file="char.asp"-->
<!--#include file="conn.asp"-->
<% 
  id=Request.Querystring("id")
  If id ="" then
    Response.Write("<script language=javascript>alert('非法访问');window.location.href='index.asp'</script>")
  end if
  if instr(id,"'") or instr(id,"select") or instr(id,"in") or instr(id,"from") or instr(id,"len") or instr(id,"where") or instr(id,"or") or instr(id,"and") then
    Response.Write("<script language=javascript>alert('你想做什么?');window.location.href='check.htm'</script>")
	Response.End
  end if                      '在这里过滤TMD的不良字符
  conn.execute("update imgbook set click=click+1 where ID=" & id)
  sql="select * from imgbook where ID="&id
  set rs=server.createobject("adodb.recordset")
  rs.open sql,conn,1,1
  if rs.eof then
	 Response.Write("对不起。没有此编号的图片!!!")
	 Response.end 
  end if
  %>
<!--#include file=../inc/top1.asp -->
<HTML><HEAD><TITLE>__陶都房市____陶都掠影_____</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<LINK 
href="../images/css.css" rel=stylesheet type=text/css>
<LINK 
href="../images/realty.css" rel=stylesheet type=text/css>
<META content="Microsoft FrontPage 5.0" name=GENERATOR></HEAD>
<BODY class=bg1 text=#000000 bgColor=#cacbc1 leftMargin=0 topMargin=0>


<TABLE height=1 cellSpacing=0 cellPadding=0 width=750 align=center border=0>
  <TBODY>
  <TR>
    <TD bgColor=#ffffff></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center border=0>
  <TBODY>
  <TR>
    <TD bgColor=#ffffff height=5></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center bgColor=#ffffff 
border=0>
  <TBODY>
    <TR> 
      <TD vAlign=top align=center width=538 height=300>
<table width="98%" border="0">
          <tr> 
            <td>&nbsp;</td>
          </tr>
          <tr>
            <td align="center"><table width="680" height="156" align="center" cellpadding="4" cellspacing="0">
                <tr> 
                  <td height="40" align="center"><br>
                    <b><%=rs("title")%></b><br>
                    <br> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;上传日期:<%=rs("updatetime")%><br>
                    <br> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;本图片被浏览<%=rs("click")%>次</td>
                </tr>
                <tr> 
                  <td align="center"><table width="100%" border="0">
                      <tr> 
                        <td align="center"> 
                          <%
		  img=rs("news_content")
		  if instr(img,"[img]") then
			 img = Replace(img, "[img]","<img src=")
			 img = Replace(img, "[/img]","  onload=""javascript:if(this.width>500)this.width=500"">")  
		  else
			 img = Replace(img, "[uploadimg]","<img src=upload/")
			 img = Replace(img, "[/uploadimg]"," onload=""javascript:if(this.width>500)this.width=500"">")  
		  end if
		  Response.Write(img)
	   %>
                        </td>
                        <td align="center"> </td>
                      </tr>
                    </table></td>
                </tr>
                <tr> 
                  <td height="2"> </td>
                </tr>
              </table>
              <table width="594" border="0" align="center" cellpadding="0" cellspacing="0">
                <tr> 
                  <td align="right"> </td>
                </tr>
                <tr> 
                  <td height="13"><strong>图片相关说明</strong>:</td>
                </tr>
                <tr> 
                  <td><%=ubbcode(rs("guestcontent"))%></td>
                </tr>
                <tr> 
                  <td align="center"> 
                    <%
	rsclose()
	set rs1=server.CreateObject("Adodb.recordset")
	sql1="select ID from imgbook where ID="&Request.Querystring("id")-1   
	rs1.open sql1,conn,1,1
  	if not rs1.bof then   
       Response.Write("<a href=view.asp?id="& Request.Querystring("id")-1 &">上一张图片</a>&nbsp;&nbsp;&nbsp;&nbsp; ")  
    end if 
	rs1.close 
	sql1="select ID from imgbook where ID="&Request.Querystring("id")+1   
	rs1.open sql1,conn,1,1
  	if not rs1.bof then   
       Response.Write("<a href=view.asp?id=" & Request.Querystring("id")+1 & ">下一张图片</a>") 
    end if  
	rs1.close
	set rs1=nothing
	%>
                  </td>
                </tr>
              </table></td>
          </tr>
        </table>
      </TD>
    </TR>
  </TBODY>
</TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center bgColor=#ffffff 
border=0>
  <TBODY>
  <TR>
    <TD>&nbsp;</TD></TR></TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center bgColor=#ffffff 
border=0>
  <TBODY>
    <TR> 
      <TD bgColor=#ffffff height=1></TD>
    </TR>
  </TBODY>
</TABLE>
</BODY></HTML>
<!--#include file=../inc/bottom.asp -->

⌨️ 快捷键说明

复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?