info_deflationary.asp

加入了反SQL注入插件

<table width="590" border="0" cellspacing="0" cellpadding="0">
  <tr> 
      <td height="1" colspan="2" background="images/bj_x.gif"></td>
  </tr>
  <tr> 
    <td width="55" height="34"><img src="images/main/th_img2.gif" width="55" height="34"></td>
    <td width="535" background="images/main/th_bg.gif"><b><font color="#FF9900">最新推荐特价商品</font></b></td>
  </tr>
  <tr> 
     <td height="1" colspan="2" background="images/bj_x.gif"></td>
  </tr>
  <tr> 
    <td colspan="2" align="center" valign="top"> 
      <table width="590" border="0" cellspacing="0" cellpadding="3">
        <%set rs=server.createobject("adodb.recordset")
			rs.open "select Top 6 * from sh_books where tejiabook=1 and bestbook=1 order by bookid,bookname desc",conn,1,1
			if rs.recordcount=0 then 
			response.write "<tr><td>　暂无推荐特价</td></tr>"
			else
		%>
   <tr> 
   <%while not rs.eof%>
          <td width="590" align=center><a href=list.asp?id=<%=rs("bookid")%>> 
            <%if rs("bookpic")="" then 
			response.write "<a href=list.asp?id="&rs("bookid")&"><img src=images/emptybook.gif width=75 height=75 border=0></a>"
			else%>
       <img src="<%=trim(rs("bookpic"))%>" width=75 border=0 height="75" alt="<%=trim(rs("bookname"))%>"></a> 
      <%end if%>
   </td>
       <%
			rs.movenext
			wend
		%>
    </tr>
      <%
		end if
		rs.close
		%>
    </table>
   </td>
 </tr>
  <tr> 
     <td height="1" colspan="2" background="images/bj_x.gif"></td>
  </tr>
</table>