info_class2.asp

加入了反SQL注入插件

 <table width="178" border="0" cellspacing="0" cellpadding="0">
  <tr> 
    <td background="images/bj_x.gif" height="1"> </td>
  </tr>
  <tr> 
    <td height="14"> 
      <table cellspacing=0 cellpadding=0 width=170 height="20">
        <tr> 
          <td> <img src="images/main/cpfl.gif" width="178" height="34"></td>
        </tr>
      </table>
    </td>
  </tr>
  <tr> 
    <td height="1" background="images/bj_x.gif"></td>
  </tr>
  <tr> 
    <td> 
      <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
        <tr> 
          <td height="6"></td>
        </tr>
        <tr> 
          <td height="20" align="center"> 
            <%
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from sh_sort order by anclassidorder",conn,1,1
if rs.recordcount=0 then
	response.write "<br>目前没有商品分类"
else
	while not rs.eof
%>
            <table width=100% cellspacing="0" cellpadding="0" border="0">
              <tr align="center"> 
                <td height="22" colspan=3  style="CURSOR: hand" onMouseOver="this.bgColor='#E3F4F0';" onMouseOut="this.bgColor='#FFFFFF';"><font color="#FF6600"><a href="class.asp?id=big&anid=<%=rs("anclassid")%>"><b><font color="#FF6600">[<%=rs("anclass")%>]</font></b></a></font></td>
              </tr>
              <%
	    set rs_s=server.CreateObject("adodb.recordset")
	    rs_s.open "select * from sh_sort2 where anclassid=" & rs("anclassid") & " order by nclassidorder",conn,1,1
	    if rs_s.recordcount=0 then 
%>
              <tr> 
                <td colspan=2 height="22">&nbsp;&nbsp;&nbsp;暂无小分类</td>
              </tr>
              <%
	    else
	    	i=0
		while not rs_s.eof
%>
              <tr> 
			    <td width=10% height="22" ></td>
                <td width=45% height="22" align=center style="CURSOR: hand" onMouseOver="this.bgColor='#E3F4F0';" onMouseOut="this.bgColor='#FFFFFF';" ><a href="class.asp?id=small&anid=<%=rs("anclassid")%>&nid=<%=rs_s("nclassid")%>"><%=rs_s("nclass")%></a></td>
				<%rs_s.movenext
					if rs_s.eof then 
					else
				%>
                <td width=45% height="22" align=center style="CURSOR: hand" onMouseOver="this.bgColor='#E3F4F0';" onMouseOut="this.bgColor='#FFFFFF';"><a href="class.asp?id=small&anid=<%=rs("anclassid")%>&nid=<%=rs_s("nclassid")%>"><%=rs_s("nclass")%></a></td>
			  </tr>
              <%
				rs_s.movenext
				end if%>
              <%
			wend
	    	end if
				%>
              <tr> 
                <td colspan=3 height=1 background="images/bj_x1.gif" ></td>
              </tr>
            </table>
            <%
	    rs_s.close
	    set rs_s=nothing
	rs.movenext
	wend
end if
rs.close
set rs=nothing
%>
          </td>
        </tr>
      </table>
    </td>
  </tr>
</table>