info_search.asp

加入了反SQL注入插件

<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="136"><img src="images/tu1.gif" width="134" height="29"></td>
	<td width="20"><img src="images/tu2.gif" width="18" height="29"></td>
	<form name="form2" method="post" action="research.asp">
      <td width="85%" align="center" background="images/tu_bg.gif">关键字词： 
        <input name="searchkey"  type="text" size=10>
        查询分类： 
        <%set rs=server.CreateObject("adodb.recordset")
		  rs.open "select * from sh_sort order by anclassidorder",conn,1,1
		  %> <select name="anclassid">
                <option value="0">所有分类</option>
                <%do while not rs.eof%>
                <option value="<%=rs("anclassid")%>"><%=trim(rs("anclass"))%></option>
                <%rs.movenext
		  loop
		  rs.close
		  set rs=nothing%>
              </select>
        <input type="image" border="0" name="submit" src="images/search1.gif" width="52" height="20"> 
        &nbsp; <a href="search.asp"><img src="images/search2.gif" width="52" height="20" border="0"></a> 
      </td>
   </form>
  </tr>
</table>