conn.asp

商城源码程序(上海数字商城整站) 功能列表： 商品管理

<link href="css.css" rel="stylesheet" type="text/css">
<!--#include file="../inc/md5.asp"-->

<%
function htmlencode(str)
htmlencode=replace(replace(replace(str,chr(13),"<br>"),"'","''"),chr(32),"&nbsp;")
end function
%>
<%
function modifycode(str)
modifycode=replace(replace(replace(str,"<br>",chr(13)),"'","''"),"&nbsp;",chr(32))
end function
%>
<%
dim conn, connstr, db
startime=timer()
UserAgent = Trim(Lcase(Request.Servervariables("HTTP_USER_AGENT")))
If InStr(UserAgent,"teleport") > 0 or InStr(UserAgent,"webzip") > 0 or InStr(UserAgent,"flashget")>0 or InStr(UserAgent,"offline")>0 Then
	Response.Write "请不要采用teleport/Webzip/Flashget/Offline等工具来浏览商城！"
	Response.End
End If

Session.Timeout=15
if request("b_rules")=1 then
Response.Buffer = True
else
Response.Buffer = True 
Response.ExpiresAbsolute = Now() - 1 
Response.Expires = 0 
Response.CacheControl = "no-cache" 
end if

db="../inc/#data.asp"
connStr="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(db)
'如果您的服务器采用较老版本Access驱动，请用下面连接方法
'connstr="driver={Microsoft Access Driver (*.mdb)};dbq=" & Server.MapPath(db)
set conn=server.createobject("ADODB.CONNECTION")
ON ERROR RESUME NEXT
	if err.number<>0 then 
		err.clear
		set conn=nothing
		response.write "数据库连接出错！"
		Response.End
	else
		conn.open connstr
		if err then 
			err.clear
			set conn=nothing
			response.write "数据库连接出错！"
			Response.End 
		end if
	end if   
%>
<%
sub time_out()
if session("admin_name")="" then
response.Write "<script language=javascript>alert('您没有登陆或登陆超时，请重新登陆！');document.location.href='login.asp';</script>"
response.end
end if	
end sub%>
<%
function checkstr(strTemp)

If Instr(strTemp,"select%20") or Instr(strTemp,"insert%20") or Instr(strTemp,"delete%20from") or Instr(strTemp,"count(") or Instr(strTemp,"drop%20table") or Instr(strTemp,"update%20") or Instr(strTemp,"truncate%20") or Instr(strTemp,"asc(") or Instr(strTemp,"mid(") or Instr(strTemp,"char(") or Instr(strTemp,"xp_cmdshell") or Instr(strTemp,"exec%20master") or Instr(strTemp,"net%20localgroup%20administrators")  or Instr(strTemp,":") or Instr(strTemp,"net%20user") or Instr(strTemp,"'") or Instr(strTemp,"%20or%20") then
%>		<script language=vbs>
<!--
  msgbox"小样！想干嘛！"
  window.location.href="login.asp" 
-->
</script>
<%response.end
End If
end function
%>