info.asp

加入了反SQL注入插件

<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td height="34" align="center"> 
      <%if request.cookies("web767")("username")="" and request.cookies("web767")("shjianame")="" then%>
	亲爱的顾客您好，购买商品请先<a href="login.asp">[<strong>登录</strong></a>] [<a href="reg.asp"><strong>新用户注册</strong></a>] 
	<%else
		set rs=server.createobject("adodb.recordset")
    	rs.open "select point,yucun,reglx,vipdate from [sh_user] where username='"&request.cookies("web767")("username")&"'",conn,1,3
    	if rs("vipdate")<>"" then 
     	'看是不是过期VIP
        if rs("vipdate")<date and rs("reglx")=2 then
        rs("reglx")=1
        rs.update
        end if
        end if
       response.Cookies("web767")("yucun")=rs("yucun")
       response.Cookies("web767")("point")=rs("point")
       response.Cookies("web767")("reglx=")=rs("reglx")
       rs.close
       set rs=nothing
	   if Request.Cookies("web767")("reglx")=2 then
	   response.write "<font color=red>"&Request.Cookies("web767")("username")&" 贵宾</font>您好，您目前有"&Request.Cookies("web767")("point")&"积分，预存款"&Request.Cookies("web767")("yucun")&"元"
	   else
	   response.write "<font color=red>"&Request.Cookies("web767")("username")&"</font>您好，您目前有"&Request.Cookies("web767")("point")&"积分，预存款"&Request.Cookies("web767")("yucun")&"元"
	   end if
	   end if
	 %>
	</td>
  </tr>
</table>