guestsave.asp

一套设计精美的学校网站全站系统

<!--#include file="include/conn.asp"-->
<!--#include file="include/config.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="admin/char.inc"-->
<!--#include file="include/md5.asp"-->
<%
author=trim(request("guestname"))
reviewid=request("reviewid")
password=md5(trim(request("password")))
if Instr(request("guestname"),"=")>0 or Instr(request("guestname"),"%")>0 or Instr(request("guestname"),chr(32))>0 or Instr(request("guestname"),"?")>0 or Instr(request("guestname"),"&")>0 or Instr(request("guestname"),";")>0 or instr(request("guestname"),",")>0 or Instr(request("guestname"),"'")>0 or Instr(request("guestname"),",")>0 or Instr(request("guestname"),chr(34))>0 or Instr(request("guestname"),chr(9))>0 or Instr(request("guestname"),"