iheeo_xiaoshouinfo.asp

易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件

<table width="100%" border="0" cellspacing="5" cellpadding="2" class="wenbenkuang" bgcolor="#D9D9D9">
<%set rs3=server.CreateObject("adodb.recordset")
rs3.open "select top 10 bookid,bookname,chengjiaocount from BJX_goods order by chengjiaocount desc",conn,1,1%>
<tr> 
<td bgcolor="#FFFFFF"> 
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
<tr> 
<td height="2"></td>
</tr>
<%i=0
do while not rs3.eof%>
<tr> 
<td height="24">&nbsp;<IMG src="images/sub_catleft_bullet.gif" align=absMiddle>&nbsp;<%response.write "<a href=product.asp?Iheeoid="&rs3("bookid")&"  title=此商品已成功销售"&rs3("chengjiaocount")&"次>"
				if len(trim(rs3("bookname")))>18 then
				response.write left(trim(rs3("bookname")),17)&".."
				else
				response.write trim(rs3("bookname"))
				end if
				response.write "</a>"
				%>
</td>
</tr>
<%i=i+1
	if i>=10 then exit do
	rs3.movenext
	loop
	rs3.close
	set rs3=nothing%>
</table>
</td>
</tr>
</table>