iheeo_tuijian.asp

易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件

<table border="0" width="100%" id="table1" cellspacing="0" cellpadding="0" height="8"><tr><td></td></tr></table>
<TABLE  class="wenbenkuang" cellSpacing=0 cellPadding=0 width="100%" border=0><TR>
	<TD width="150"><img border="0" src="image/tuijian.gif"></TD><TD><script type="text/javascript"><!--
google_ad_client = "pub-3074014307908403";
/* 商城源代码首页 */
google_ad_slot = "4192466355";
google_ad_width = 468;
google_ad_height = 15;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></TD></TR></TABLE>
<table border="0" width="100%" id="table1" cellspacing="0" cellpadding="0" height="8"><tr><td></td></tr></table>
<table border="0" width="100%" id="table2" cellpadding="3"><tr>
<td width="280" align="center"><table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
<% 
SQL = "Select Top 1 * From [BJX_goods] where bestbook=1 order by bookid desc"
Set Rs = Conn.Execute(SQL)
For i=1 to 1
If Rs.Eof Then Exit For
bookid = Rs("bookid")
bookpic = Rs("bookpic")
shichangjia = Rs("shichangjia")
huiyuanjia = Rs("huiyuanjia")
chengjiaocount = Rs("chengjiaocount")
liulancount = Rs("liulancount")
bookad = "【"&Rs("bookad")&"】"
if len(trim(rs("bookname")))>18 Or len(trim(rs("bookad")))>10 then
bookname = left(trim(Rs("bookname")),18)&" "&left(trim(rs("bookad")),10)&".."
else
bookname = Rs("bookname")&" "&trim(rs("bookad"))
end if
%>
<tr>
<td width="25%" height="23" valign="top">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center" height="275">
<TABLE onmouseover="this.style.backgroundColor='#FF4FAE'" onmouseout="this.style.backgroundColor=''" width=260 height=260 cellSpacing=1 cellPadding=2 bgColor=#e1e1e1 border=0>
                    <TBODY>
                      <TR>
                        <TD bgColor=#ffffff align=center>
                          <%if rs("bookpic")="" then 
	response.write "<div align=center><a href=product.asp?Iheeoid="&rs("bookid")&" target=_blank><img src=images/emptybook.gif width=75 height=75 border=0></a></div>"
	else%><a href="product.asp?Iheeoid=<%=rs("bookid")%>" target="_blank"><img src="<%=trim(rs("bookpic"))%>" width=256 height=256 border=0 align=absmiddle></a>
                          <%end if%>
                        </TD>
                      </TR>
                    </TBODY>
                </TABLE></td>
</tr>
<tr>
<td align="center"><a class="a4" href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><font color="#FF6600"><%= bookName %></font></a><br>市场价：<s><%=formatnumber(rs("shichangjia"),0)&"元"%></s>　会员价：<font color=#FF3300><%=formatnumber(rs("huiyuanjia"),0)&"元"%></font><br>累计售出：<font color=#FF3300><%=rs("chengjiaocount")%></font>件　关注热度：<font color=#FF3300><%=rs("liulancount")%></font>次</td>
</tr>
</table>
</td>
<% 
				Rs.Movenext
				 %>
</tr>
<% 
			Next
			Rs.Close
			  %>
</table></td>
<td><table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
<% 
SQL = "Select Top 8 * From [BJX_goods] where bestbook=1 order by bookid desc"
Set Rs = Conn.Execute(SQL)
For i=1 to 2
If Rs.Eof Then Exit For
bookid = Rs("bookid")
bookpic = Rs("bookpic")
shichangjia = Rs("shichangjia")
huiyuanjia = Rs("huiyuanjia")
if len(trim(rs("bookname")))>10 then
bookname = left(trim(Rs("bookname")),8)&".."
else
bookname = Rs("bookname")
end if
%>
<tr>
<td width="25%" height="23" valign="top">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center" height="110">
<TABLE onmouseover="this.style.backgroundColor='#FF4FAE'" onmouseout="this.style.backgroundColor=''" width="90" height="90" cellSpacing="1" cellPadding="3" bgColor="#e1e1e1" border="0">
<TR><TD width="90" height="90" bgColor="#ffffff" align="center">
<%if bookpic = "" then 
response.write "<a href='product.asp?Iheeoid="&rs("bookid")&"' target=_blank><img src='images/emptybook.gif' width='75' height='75' border='0'></a>"
else%><a href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><img src="<%=trim(bookpic)%>" width="84" height="84" border="0" align="absmiddle"></a>
<%end if%></TD></TR>
</TABLE>
</td>
</tr>
<tr>
<td align="center"><a class="a4" href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><font color="#FF6600"><%= bookName %></font></a><br>市场价：<s><%=formatnumber(rs("shichangjia"),0)&"元"%></s><br>会员价：<font color=#FF3300><%=formatnumber(rs("huiyuanjia"),0)&"元"%></font></td>
</tr>
</table>
</td>
<%
Rs.Movenext
If Rs.Eof Then Exit For
bookid = Rs("bookid")
bookpic = Rs("bookpic")
shichangjia = Rs("shichangjia")
huiyuanjia = Rs("huiyuanjia")
if len(trim(rs("bookname")))>10 then
bookname = left(trim(Rs("bookname")),8)&".."
else
bookname = Rs("bookname")
end if
%>
<td width="25%" height="23" valign="top">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center" height="110">
<TABLE onmouseover="this.style.backgroundColor='#FF4FAE'" onmouseout="this.style.backgroundColor=''" width="90" height="90" cellSpacing="1" cellPadding="3" bgColor="#e1e1e1" border="0">
<TR><TD width="90" height="90" bgColor="#ffffff" align="center">
<%if bookpic = "" then 
response.write "<a href='product.asp?bjxGid="&rs("bookid")&"' target=_blank><img src='images/emptybook.gif' width='75' height='75' border='0'></a>"
else%><a href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><img src="<%=trim(bookpic)%>" width="84" height="84" border="0" align="absmiddle"></a>
<%end if%></TD></TR>
</TABLE>
</td>
</tr><tr>
<td align="center"><a class="a4" href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><font color="#FF6600"><%= bookName %></font></a><br>市场价：<s><%=formatnumber(rs("shichangjia"),0)&"元"%></s><br>会员价：<font color=#FF3300><%=formatnumber(rs("huiyuanjia"),0)&"元"%></font></td>
</tr>
</table>
</td>
<%
Rs.Movenext
If Rs.Eof Then Exit For
bookid = Rs("bookid")
bookpic = Rs("bookpic")
shichangjia = Rs("shichangjia")
huiyuanjia = Rs("huiyuanjia")
if len(trim(rs("bookname")))>10 then
bookname = left(trim(Rs("bookname")),8)&".."
else
bookname = Rs("bookname")
end if
%>
<td width="25%" height="23" valign="top">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center" height="110">
<TABLE onmouseover="this.style.backgroundColor='#FF4FAE'" onmouseout="this.style.backgroundColor=''" width="90" height="90" cellSpacing="1" cellPadding="3" bgColor="#e1e1e1" border="0">
<TR><TD width="90" height="90" bgColor="#ffffff" align="center">
<%if bookpic = "" then 
response.write "<a href='product.asp?bjxGid="&rs("bookid")&"' target=_blank><img src='images/emptybook.gif' width='75' height='75' border='0'></a>"
else%><a href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><img src="<%=trim(bookpic)%>" width="84" height="84" border="0" align="absmiddle"></a>
<%end if%></TD></TR>
</TABLE>
</td>
</tr><tr>
<td align="center"><a class="a4" href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><font color="#FF6600"><%= bookName %></font></a><br>市场价：<s><%=formatnumber(rs("shichangjia"),0)&"元"%></s><br>会员价：<font color=#FF3300><%=formatnumber(rs("huiyuanjia"),0)&"元"%></font></td>
</tr>
</table>
</td>
<%
Rs.Movenext
If Rs.Eof Then Exit For
bookid = Rs("bookid")
bookpic = Rs("bookpic")
shichangjia = Rs("shichangjia")
huiyuanjia = Rs("huiyuanjia")
if len(trim(rs("bookname")))>10 then
bookname = left(trim(Rs("bookname")),8)&".."
else
bookname = Rs("bookname")
end if
%>
<td width="25%" height="23" valign="top">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center" height="110">
<TABLE onmouseover="this.style.backgroundColor='#FF4FAE'" onmouseout="this.style.backgroundColor=''" width="90" height="90" cellSpacing="1" cellPadding="3" bgColor="#e1e1e1" border="0">
<TR><TD width="90" height="90" bgColor="#ffffff" align="center">
<%if bookpic = "" then 
response.write "<a href='product.asp?bjxGid="&rs("bookid")&"' target=_blank><img src='images/emptybook.gif' width='75' height='75' border='0'></a>"
else%><a href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><img src="<%=trim(bookpic)%>" width="84" height="84" border="0" align="absmiddle"></a>
<%end if%></TD></TR>
</TABLE>
</td>
</tr><tr>
<td align="center"><a class="a4" href="product.asp?Iheeoid=<%= bookid %>" target="_blank"><font color="#FF6600"><%= bookName %></font></a><br>市场价：<s><%=formatnumber(rs("shichangjia"),0)&"元"%></s><br>会员价：<font color=#FF3300><%=formatnumber(rs("huiyuanjia"),0)&"元"%></font></td>
</tr>
</table>
</td>
<%
Rs.Movenext
%>
</tr>
<%
Next
Rs.Close
%>
</table></td></tr>
</table>