innadd.jsp

这是一个博客系统

<%@ page contentType="text/html; charset=gb2312"  import="java.sql.*" errorPage="" %>
<%@ include file="Conn.jsp" %>
<%
 String str=request.getParameter("name");
 String password=request.getParameter("pass");
 String username=request.getParameter("username");
 String shen=request.getParameter("shen");
 String mailname=request.getParameter("mailname");
 str=getS(str);
 username=getS(username);
 String sql="insert into privateuser (user_nc,user_pass,user_name,user_zhen,user_mail) values ('"+str+"','"+password+"','"+username+"','"+shen+"','"+mailname+"')";
 try{
      Exec(sql);
      out.print("1");
     }
 catch(Exception e){
       out.print("0");
  }
%>