conn.asp

7k书城小偷程序。。。。。。。。。。。。。。。。。。。。。

<% LANGUAGE="VBSCRIPT" %>
<%
set myc=Createobject("ADODB.Connection")
myc.ConnectionString="DBQ="& server.mappath("guest.asp")& ";DRIVER={Microsoft Access Driver (*.mdb)};"
myc.open

idss=request.querystring("idss")

if idss<>"" then
  set objgbrs=Server.CreateObject("ADODB.Recordset")
  ssql="select * from admin where idss=" & Sqlstr(idss)
  objgbrs.open ssql,myc
if objgbrs.eof then
  response.redirect"index.asp?myid=" & myid & ""
else
  Session.Timeout=20
  Session("admin")="1"
 end if
end if
set objgbrs=nothing

function sqlstr(data)
   sqlstr="'" & Replace(data,"'","'") & "'"
  End function

%>