book_write.asp

asp源码

<!--#include file="book_conn.asp"-->
<%
if request("send")="ok" then

	username=trim(request.form("username"))
	usermail=trim(request.form("usermail"))

	if username="" or usermail="" or request.form("Comments")="" then
	response.write "<script language='javascript'>"
	response.write "alert('必须填写用户名、邮箱、留言内容，请检查是否填写完整！');"
	response.write "location.href='javascript:history.go(-1)';"
	response.write "</script>"
	response.end
	end if

	if Instr(username,"=")>0 or Instr(username,"%")>0 or Instr(username,chr(32))>0 or Instr(username,"?")>0 or Instr(username,";")>0 or Instr(username,",")>0 or Instr(username,"'")>0 or Instr(username,chr(34))>0 or Instr(username,chr(9))>0 or Instr(username,"