iheeo_jp.asp

来自「易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件」· ASP 代码 · 共 97 行

ASP
97
字号

<!--#include file="Include/Iheeo_Conn.asp"-->
<!--#include file="Include/Iheeo_config.asp"-->
<html><head><title><%=webname%>--商品信息</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link href="images/css.css" rel="stylesheet" type="text/css">
</head>
<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<!--#include file="Include/Iheeo_head.asp"-->
<TABLE cellSpacing=0 cellPadding=0 width=970 align=center border=0>
  <TBODY>
    <TR>
      <TD class=b width=7 background=image/b-l.gif> </TD>
      <TD class=b vAlign=top align=left width=960><table width="960" align="center" border="0" cellspacing="0" cellpadding="0" class="table-zuoyou" bordercolor="#CCCCCC">
        <tr>
          <td width="100%" valign="top" bgcolor="#FFFFFF" bordercolor="#FFFFFF"><table width="100%" border="0" cellspacing="0" cellpadding="4" align="center" class="table-shangxia">
              <tr>
                <td background="images/class_bg.jpg" height=50> <img src="images/ring02.gif" width="23" height="15" align="absmiddle"> <a href=index.asp><%=webname%></a> >> 奖品信息</td>
              </tr>
            </table>
              <%if IsNumeric(request.QueryString("id"))=False then
response.write("<script>alert(""非法访问!"");location.href=""index.asp"";</script>")
response.end
end if
dim id
id=request.QueryString("id")
if not isinteger(id) then
response.write"<script>alert(""非法访问!"");location.href=""index.asp"";</script>"
end if%>
              <%
set rs=server.createobject("adodb.recordset")
rs.open "select * from BJX_jiangpin where bookid="&request("id"),conn,1,3
if rs.recordcount=0 then 
%>
              <table width="370" border="0" cellspacing="0" cellpadding="5" align="center">
                <tr>
                  <td align=center>调用奖品错误</td>
                </tr>
              </table>
              <%else%>
              <table width="100%" border="0" cellspacing="0" cellpadding="0">
                <tr>
                  <td valign="top" width="40%"><table width="100%" border="0" cellspacing="0" cellpadding="0">
                      <tr>
                        <td><table align=center cellspacing=0 cellpadding=0 width=220 height=220 border=0>
                            <tbody>
                              <tr>
                                <td background=images/cla.gif align=center><%if rs("bookpic")<>"" then 
response.write "<a href="&trim(rs("bookpic2"))&" ><img src="&trim(rs("bookpic"))&" width=150 border=0></a>"
else
response.write "<img src=images/emptybook.gif width=150 border=0>"
end if%>
                                </td>
                              </tr>
                            </tbody>
                        </table></td>
                      </tr>
                  </table></td>
                  <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="2">
                      <tr>
                        <td>市 场 价:<%=rs("shichangjia")%> 元,所需积分:<%=rs("jifen")%></td>
                      </tr>
                      <tr>
                        <td>奖品名称:<%=rs("bookname")%></td>
                      </tr>
                      <tr>
                        <td>奖品说明:<%=rs("bookcontent")%></td>
                      </tr>
                  </table></td>
                </tr>
                <%
		rs.close
		set rs=nothing
		end if%>
                <%
		set rs=server.createobject("adodb.recordset")
		rs.open "select * from BJX_pinglun where bookid="&request("id")&" order by pinglundate desc",conn,1,1
		j=rs.recordcount
		'if i>5 then j=5
		for i=1 to j
		%>
                <%	
	rs.movenext
	next
	%>
            </table></td>
        </tr>
      </table></TD>
      <TD class=b width=7 background=image/b-r.gif><IMG height=1 
      src="image/tm.gif" width=1></TD>
    </TR>
  </TBODY>
</TABLE>
<!--#include file="Include/Iheeo_service.asp"-->
<!--#include file="Include/Iheeo_foot.asp"-->
</body>
</html>

⌨️ 快捷键说明

复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?