pstart.asp

安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!

<%@ LANGUAGE = VBScript CodePage = 936%>
<%
'Option Explicit
Response.Buffer = True
Server.scriptTimeout="20"
on error resume next
dim starttime:starttime=timer()
dim connstr,conn
dim mdb,bbsmdb
mdb  =  "../mdb/hx#66.mdb"     '主数据库名称和路径
bbsmdb = "data/#hx.asp"          '论坛数据库名称和路径
connstr="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(bbsmdb)
set conn=Server.CreateObject("ADODB.connection") 
conn.open connstr
dim rs,sqlstr

If Err.Number <> 0 Then 
Response.Clear
response.write "<h1>Hxcms.bbs Error.</h1>"
response.end
end if

set rs=server.CreateObject("adodb.recordset")
sqlstr="select top 1 * from hx66_bbsset"
rs.open sqlstr,conn,1,1
if not rs.eof then
dim bbsname:bbsname=rs("hx66_bbsname")
dim candelnum:candelnum=rs("hx66_delbbsidinfo")
dim candelday:candelday=rs("hx66_delbbsdayinfo")
dim perpagenum:perpagenum=rs("hx66_perpagenum")
dim allbbscss:allbbscss=rs("hx66_bbscss")
dim useubase:useubase=rs("hx66_useubase")
dim showset:showset=rs("hx66_showset")
dim diary:diary=rs("hx66_diary")
dim pos:pos=rs("hx66_points")
dim moy:moy=rs("hx66_money")
dim zpos:zpos=rs("hx66_ztpoints")
dim hpos:hpos=rs("hx66_hfpoints")
dim tpos:tpos=rs("hx66_tpoints")
dim jpos:jpos=rs("hx66_jpoints")
dim bbsskin:bbsskin=rs("hx66_bbsskin")
dim hx66skin:hx66skin=rs("hx66_skins")
dim bbscon:bbscon=rs("hx66_vote")
dim hx66_upload:hx66_upload=split(rs("hx66_upload"),"|")
dim canupload:canupload=hx66_upload(0)
dim uploadsize:uploadsize=hx66_upload(1)
dim uploadnum:uploadnum=hx66_upload(2)
dim uploadtype:uploadtype=rs("hx66_uploadtype")
dim nowtime:nowtime=rs("hx66_nowtime")
dim hx_todaynum:hx_todaynum=rs("todaynum")
dim hx_ztodaynum:hx_ztodaynum=rs("ztodaynum")
dim hx_topicnum:hx_topicnum=rs("topicnum")
dim hx_allnum:hx_allnum=rs("allnum")
else
response.write "<h1>Hxcms.bbs Error.</h1>"
response.end
end if
rs.close
set rs=nothing
%>
<%
Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr
Fy_In = "'|;|and|(|)|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
Fy_Inf = split(Fy_In,"|")
If Request.QueryString<>"" Then
For Each Fy_Get In Request.QueryString
For Fy_Xh=0 To Ubound(Fy_Inf)
If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then
Response.Write "<Script Language=JavaScript>alert('系统提示↓\n\n请不要在参数中包含非法字符尝试注入！');window.close();</Script>"
Response.End
End If
Next
Next
End If
%>