conn.asp

一个不错的音乐网站

<%
'可修改设置一：========================定义数据库类别，1为SQL数据库，0为Access数据库=============================
Const IsSqlDataBase = 0
'================================================================================================================
If IsSqlDataBase = 0 Then
dim conn
dim dbpath
set conn=server.createobject("adodb.connection")
'必修改设置三：========================Access数据库设置==========================================================
'第一次使用请修改本处数据库地址并相应修改data目录中数据库名称，如:将bzmtv-Data.mdb修改为bzmtv-Data.asp
DBPath = Server.MapPath("../bzmtv-data/bzmtv-Data.mdb")
'================================================================================================================
conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DBPath
Else
dim connstr
Dim strSQLServerName
Dim strSQLDBUserName
Dim strSQLDBPassword
Dim strSQLDBName
strSQLServerName = "192.168.1.210"      '服务器名称或地址
strSQLDBUserName = "sa"             '数据库帐号
strSQLDBPassword = "123456"               '数据库密码
strSQLDBName = "music"             '数据库名称
on error resume next
Set conn = Server.CreateObject("ADODB.Connection")
connstr = "Provider=SQLOLEDB.1;Persist Security Info=False;Server=" & strSQLServerName & ";User ID=" & strSQLDBUserName & ";Password=" & strSQLDBPassword & ";Database=" & strSQLDBName & ";"
conn.open connstr
End IF
%>
<%'***********************************************
'过程名：checksql
'作  用：过滤恶意字符以及html语法
'参  数：str  ----待处理的字符串
'       strtype ----过滤方式,1为数字,2为html过滤,3为不过滤html
'返回值:过滤了的字符
'***********************************************
Function checksql(str,strtype)
str=""&str
str=Trim(str)
str=replace(str,"'","''")
str = Replace(str, CHR(32), "&nbsp;")
str = Replace(str, CHR(9), "&nbsp;")
str=Replace(str, CHR(10) & CHR(10), "</P><P> ")
str=Replace(str, CHR(10), "<BR> ")			
str=Replace(str, CHR(13), "")
if strtype=1 then
   if isNumeric(str) then
     str=clng(str)
   else
     str=1
   end if
elseif strtype=2 then
  str=replace(str,"<","&lt;")
  str=replace(str,">","&gt;") 
  str=replace(str,CHR(34),"&quot;") 
  str=replace(str," ","&nbsp;")
  str=Replace(str, CHR(39), "&#39;")
elseif strtype=4 then
  str=replace(str,"&","&amp;")
else   
  str=str
end if
  checksql=str
end function
%>