guestsave.asp

zheng fu wang zhan gong neng qi quan

<!--#include file="conn.asp"-->
<!--#include file="ConnUser.asp"-->
<!--#include file="config.asp"-->
<!--#'include file="char.inc"-->
<!--#include file="md5.asp"-->
<!--#include file="ChkURL.asp"-->

<%
verifycode9=checkstr(request.form("verifycode9"))

if request.cookies(eChuang)("key")<>"" then%>
<!--#include file="ChkUser.asp"-->
<%end if
author=ChkRequest(request("guestname"),0)	'防注入



if  verifycode9<>session("verifycode9") then
Show_Err("对不起，请输入正确的用户名、密码及验证码。<br><br><a href='javascript:history.back()'>返回</a>")
else

reviewid=ChkRequest(request("reviewid"),1)	'防注入
password=md5(trim(request("password")))
if Instr(request("guestname"),"=")>0 or Instr(request("guestname"),"%")>0 or Instr(request("guestname"),chr(32))>0 or Instr(request("guestname"),"?")>0 or Instr(request("guestname"),"&")>0 or Instr(request("guestname"),";")>0 or instr(request("guestname"),",")>0 or Instr(request("guestname"),"'")>0 or Instr(request("guestname"),",")>0 or Instr(request("guestname"),chr(34))>0 or Instr(request("guestname"),chr(9))>0 or Instr(request("guestname"),"