⭐ 欢迎来到虫虫下载站! | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站

📄 addgood.asp

📁 易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件
💻 ASP
字号:
<!--#include file="conn.asp"-->
<!--#include file="power.asp"-->
<html><head><title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link href="../images/css.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
.style1 {color: #FF0000}
-->
</style>
</head>
<%dim count
set rs=server.createobject("adodb.recordset")
rs.open "select * FROM BJX_class2 order by Nclassidorder ",conn,1,1%>
<script language = "JavaScript">
var onecount;
onecount=0;
subcat = new Array();
<%
   count = 0
   do while not rs.eof 
%>
subcat[<%=count%>] = new Array("<%= trim(rs("Nclass"))%>","<%= rs("anclassid")%>","<%= rs("Nclassid")%>");
<%
        count = count + 1
        rs.movenext
        loop
        rs.close
%>
		
onecount=<%=count%>;

function changelocation(locationid)
    {
    document.myform.Nclassid.length = 0; 

    var locationid=locationid;
    var i;
    for (i=0;i < onecount; i++)
        {
            if (subcat[i][1] == locationid)
            { //这句不是很理解
             document.myform.Nclassid.options[document.myform.Nclassid.length] = new Option(subcat[i][0], subcat[i][2]);
            }        
        }
        
    }    
</script>
<body>
<table class="tableBorder" width="90%" border="0" align="center" cellpadding="0" cellspacing="1">
<tr > 
<td align="center" background="../images/admin_bg_1.gif" height="25"><b><font color="#ffffff">添加新商品</font></b> </td>
</tr>
<tr > 
<form name="myform" method="post" action="saveaddgood.asp?action=add" OnSubmit="return checkkk()" >
<td> 
                                <table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
                                  <tr > 
                                    <td width="12%" align="right" height="30">选择商品的分类:</td>
                                    <td> 
                                      <%
	rs.open "select * FROM BJX_class1 order by anclassidorder",conn,1,1
	if rs.eof and rs.bof then
	response.write "请先添加栏目。"
	response.end
	else
%>
										大类:
<select name="anclassid" size="1" id="anclassid" onChange="changelocation(document.myform.anclassid.options[document.myform.anclassid.selectedIndex].value)">
                                        <option selected value="<%=rs("anclassid")%>"><%=trim(rs("anclass"))%></option>
                                        <%      dim selclass
         selclass=rs("anclassid")
        rs.movenext
        do while not rs.eof
%>
                                        <option value="<%=rs("anclassid")%>"><%=trim(rs("anclass"))%></option>
                                        <%
        rs.movenext
        loop
		end if
        rs.close
%>
                                      </select> 
									  小类:
<select name="Nclassid">
                                        <%rs.open "select * FROM BJX_class2 where anclassid="&selclass ,conn,1,1
if not(rs.eof and rs.bof) then
%>
                                        <option selected value="<%=rs("NclassID")%>"><%=rs("Nclass")%></option>
                                        <% rs.movenext
do while not rs.eof%>
                                        <option value="<%=rs("NclassID")%>"><%=rs("Nclass")%></option>
                                        <% rs.movenext
loop
end if
        rs.close
        set rs = nothing
%>
                                      </select></td>
								  </tr>
									  <tr >
									  <td align="right" bgcolor="#EBEAEA" height="30">产品名称:</td>
                                    <td bgcolor="#EBEAEA"><input name="bookname" type="text" id="bookname" size="30"> 简短广告:<input name="bookad" type="text" id="bookad" size="10"></td>
                                  </tr>
                                  <tr >
								  <td align="right" height="30">产品品牌:</td>
                                    <td><input name="pingpai" type="text" id="pingpai">
									<%
set rs_s=server.createobject("adodb.recordset")
rs_s.open "select * from BJX_pingpai order by pingpaiorder ",conn,1,1
%>
<select name="select" onchange="(document.myform.pingpai.value=this.options[this.selectedIndex].value)">
<option selected>请选择品牌</option>
<%
while not rs_s.eof
%>
<option value="<%=rs_s("pingpainame")%>"><%=rs_s("pingpainame")%></option>
<%
rs_s.movenext
wend
rs_s.close
set rs_s=nothing
%>
                                      </select>
                                    </td>
                                  </tr>
                                  <tr >
								  <td align="right" bgcolor="#EBEAEA" height="30">商品规格:</td>
                                    <td bgcolor="#EBEAEA"><input name="isbn" type="text" id="isbn"></td>
                                  </tr>
                                  <tr >
                                    <td align="right" height="30">商品单位:</td>
									<td> <input name="bookchuban" type="text" id="bookchuban" size="7">
                                      <%
set rs_s=server.createobject("adodb.recordset")
rs_s.open "select * from BJX_danwei order by danweiorder ",conn,1,1
%>
                                      <select name="select" onchange="(document.myform.bookchuban.value=this.options[this.selectedIndex].value)">
                                        <option selected>请选择单位</option>
                                        <%
while not rs_s.eof
%>
                                        <option value="<%=rs_s("danweiname")%>"><%=rs_s("danweiname")%></option>
                                        <%
rs_s.movenext
wend
rs_s.close
set rs_s=nothing
%>
                                </select>
                                </td>
                                </tr>
                                <tr >
				<td align="right" bgcolor="#EBEAEA" height="30">产品价格:</td>
                                    <td bgcolor="#EBEAEA">
		市场价:<input name="shichangjia" type="text" id="shichangjia" size="6" onKeyPress	= "return regInput(this,	/^\d*\.?\d{0,2}$/,		String.fromCharCode(event.keyCode))" 
		onpaste		= "return regInput(this,	/^\d*\.?\d{0,2}$/,		window.clipboardData.getData('Text'))"
		ondrop		= "return regInput(this,	/^\d*\.?\d{0,2}$/,		event.dataTransfer.getData('Text'))">
		会员价:
		<input name="huiyuanjia" type="text" id="huiyuanjia" size="6" onKeyPress	= "return regInput(this,	/^\d*\.?\d{0,2}$/,		String.fromCharCode(event.keyCode))" 
		onpaste		= "return regInput(this,	/^\d*\.?\d{0,2}$/,		window.clipboardData.getData('Text'))"
		ondrop		= "return regInput(this,	/^\d*\.?\d{0,2}$/,		event.dataTransfer.getData('Text'))">
		VIP价:
		<input name="vipjia" type="text" id="vipjia" size="6" onKeyPress	= "return regInput(this,	/^\d*\.?\d{0,2}$/,		String.fromCharCode(event.keyCode))" 
		onpaste		= "return regInput(this,	/^\d*\.?\d{0,2}$/,		window.clipboardData.getData('Text'))"
		ondrop		= "return regInput(this,	/^\d*\.?\d{0,2}$/,		event.dataTransfer.getData('Text'))">
		</td></tr>
		<tr >
		<td align="right" height="30">库存及销售:</td>
                                    <td>
		库存数:<input name="kucun" type="text" id="kucun" value="0" size="6" onKeyPress	= "return regInput(this,	/^[0-9]*$/,		String.fromCharCode(event.keyCode))"
		onpaste		= "return regInput(this,	/^[0-9]*$/,		window.clipboardData.getData('Text'))"
		ondrop		= "return regInput(this,	/^[0-9]*$/,		event.dataTransfer.getData('Text'))" >
		已销售:
		<input name="chengjiaocount" type="text" id="chengjiaocount" value="0" size="6" onKeyPress	= "return regInput(this,	/^[0-9]*$/,		String.fromCharCode(event.keyCode))"
		onpaste		= "return regInput(this,	/^[0-9]*$/,		window.clipboardData.getData('Text'))"
		ondrop		= "return regInput(this,	/^[0-9]*$/,		event.dataTransfer.getData('Text'))" readonly>
		积 分:
		<input name="yeshu" type="text" id="yeshu" value="0" size="6" onKeyPress	= "return regInput(this,	/^[0-9]*$/,		String.fromCharCode(event.keyCode))"
		onpaste		= "return regInput(this,	/^[0-9]*$/,		window.clipboardData.getData('Text'))"
		ondrop		= "return regInput(this,	/^[0-9]*$/,		event.dataTransfer.getData('Text'))" >
		</td></tr>
		<tr >
		<td align="right" bgcolor="#EBEAEA" height="30">产品缩略图:</td>
                                    <td bgcolor="#EBEAEA">
									<input name="zhuang" type="text" id="zhuang" size="30">
									&nbsp;<input type="button" name="Submit2" value="上传缩略图" onClick="window.open('../Iheeo_upload.asp?formname=myform&editname=zhuang&uppath=Iheeo_pic&filelx=jpg','','status=no,scrollbars=no,top=20,left=110,width=420,height=165')">
                                    </td>
                                  </tr>
                                  <tr >
								  <td align="right" height="30">产品图片:</td>
                                    <td>
									<input name="bookpic" type="text" id="bookpic" size="30">
									&nbsp;<input type="button" name="Submit2" value="上传大图片" onClick="window.open('../Iheeo_upload.asp?formname=myform&editname=bookpic&uppath=Iheeo_pic&filelx=jpg','','status=no,scrollbars=no,top=20,left=110,width=420,height=165')">
                                    </td>
                                  </tr>
                                  <tr >
								  <td bgcolor="#EBEAEA" align="right" height="30">其他图片:</td>
                                    <td bgcolor="#EBEAEA"><input name="bookpic1" type="text" id="bookpic1" size="30">
									&nbsp;<input type="button" name="Submit2" value="上传其他图片" onClick="window.open('../Iheeo_upload.asp?formname=myform&editname=bookpic1&uppath=Iheeo_pic&filelx=jpg','','status=no,scrollbars=no,top=20,left=110,width=420,height=165')"></td>
                                  </tr>
                                  <tr >
								  <td align="right" height="30">其他图片:</td>
                                    <td><input name="bookpic2" type="text" id="bookpic2" size="30">
									&nbsp;<input type="button" name="Submit2" value="上传其他图片" onClick="window.open('../Iheeo_upload.asp?formname=myform&editname=bookpic2&uppath=Iheeo_pic&filelx=jpg','','status=no,scrollbars=no,top=20,left=110,width=420,height=165')"></td>
                                  </tr>
                                  <tr >
								  <td bgcolor="#EBEAEA" align="right" height="30">其他图片:</td>
                                    <td bgcolor="#EBEAEA"><input name="bookpic3" type="text" id="bookpic3" size="30">
									&nbsp;<input type="button" name="Submit2" value="上传其他图片" onClick="window.open('../Iheeo_upload.asp?formname=myform&editname=bookpic3&uppath=Iheeo_pic&filelx=jpg','','status=no,scrollbars=no,top=20,left=110,width=420,height=165')"></td>
                                  </tr>
                                  <tr >
								  <td align="right" height="30">其他图片:</td>
                                    <td><input name="bookpic4" type="text" id="bookpic4" size="30">
									&nbsp;<input type="button" name="Submit2" value="上传其他图片" onClick="window.open('../Iheeo_upload.asp?formname=myform&editname=bookpic4&uppath=Iheeo_pic&filelx=jpg','','status=no,scrollbars=no,top=20,left=110,width=420,height=165')"></td>
                                  </tr>
                                  <tr >
                                    <td valign="top" align="right" bgcolor="#EBEAEA" height="30">编辑推荐:</td>
<td bgcolor="#EBEAEA">
<input type="hidden" id="myEditor" value="" style="display:none" /><textarea id="bookcontent" name="bookcontent" style="display:none"><div>请输入相应的编辑推荐介绍</div></textarea><iframe id="bookcontent___Frame" src="Iheeo_editor/editor.htm?id=bookcontent&ReadCookie=0" frameborder="0" scrolling="no" width="621" height="457"></iframe>
</td>
</tr>
<tr ><td align="right" height="30">商品介绍:</td>
<td><textarea name="bookinfo" cols="60" rows="5" id="bookinfo"></textarea></td>
</tr>
                                  <tr >
<td align="right" bgcolor="#EBEAEA" height="30">生产商联系信息:</td>
<td bgcolor="#EBEAEA"><textarea name="bookother1" cols="60" rows="3" id="bookother1"></textarea></td>
</tr>
                                  <tr >
<td align="right" height="30">包装清单:</td>
<td><textarea name="bookother2" cols="60" rows="3" id="bookother2"></textarea></td>
</tr>
                                  <tr >
<td align="right" bgcolor="#EBEAEA" height="30">外观参数:</td>
<td bgcolor="#EBEAEA"><textarea name="bookother3" cols="60" rows="5" id="bookother3"></textarea></td>
</tr>
                                  <tr >
<td align="right" height="30">专业评论:</td>
<td><textarea name="bookother4" cols="60" rows="5" id="bookother4"></textarea></td>
</tr>
<tr >
<td bgcolor="#EBEAEA" height="30"></td>
<td bgcolor="#EBEAEA">
<input name="newsbook" type="checkbox" id="bestbook" value="1">
新 品 <input name="bestbook" type="checkbox" id="bestbook" value="1">
推 荐 <input name="tejiabook" type="checkbox" id="bestbook" value="1">
特 价
</td>
</tr>
<tr >
  <td height="30" bgcolor="#FAFFE8" align="right">商品关键字(Keywords):</td>
  <td bgcolor="#FAFFE8">
	<textarea name="Keywords" cols="60" rows="2" id="Keywords"></textarea></td>
</tr>
<tr >
  <td height="30" bgcolor="#FAFFE8" align="right">商品说明(Description):</td>
  <td bgcolor="#FAFFE8">
	<textarea name="Description" cols="60" rows="3" id="Description"></textarea></td>
</tr>
<tr >
<td bgcolor="#EBEAEA" height="30"></td>
<td bgcolor="#EBEAEA">
<input type="submit" name="Submit" value="提交保存" >
<input onclick="ClearReset()" type=reset name="Clear" value="重新填写">
</td>
</tr>
</table>
</td>
</form>
</tr>
</table>
</body>
</html>

<SCRIPT LANGUAGE="JavaScript">
<!--
function checkkk()
{
     if(checkspace(document.myform.bookname.value)) {
	document.myform.bookname.focus();
    alert("请输入商品名称!");
	return false;
  }
     if(checkspace(document.myform.shichangjia.value)) {
	document.myform.shichangjia.focus();
    alert("请输入市场价格!");
	return false;
  }
     if(checkspace(document.myform.huiyuanjia.value)) {
	document.myform.huiyuanjia.focus();
    alert("请输入会员价格!");
	return false;
  }
     if(checkspace(document.myform.vipjia.value)) {
	document.myform.vipjia.focus();
    alert("请输入VIP会员价格!");
	return false;
  }
 
}
function checkspace(checkstr) {
  var str = '';
  for(i = 0; i < checkstr.length; i++) {
    str = str + ' ';
  }
  return (str == checkstr);
}
//-->
</script>
<script>
	function regInput(obj, reg, inputStr)
	{
		var docSel	= document.selection.createRange()
		if (docSel.parentElement().tagName != "INPUT")	return false
		oSel = docSel.duplicate()
		oSel.text = ""
		var srcRange	= obj.createTextRange()
		oSel.setEndPoint("StartToStart", srcRange)
		var str = oSel.text + inputStr + srcRange.text.substr(oSel.text.length)
		return reg.test(str)
	}
</script>

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -