iheeo_search.asp

易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件

<TABLE cellSpacing=0 cellPadding=0 width="100%" border=0 class="wenbenkuang">
      <TBODY>
        <TR>
          <TD>
            <TABLE cellSpacing=0 cellPadding=0 width="100%"  border=0>
              <TBODY> 
                <TR>
                  <TD height="25"><table width="98%" border=0 align="center" cellpadding=0 cellspacing=0>
					  <form name="form2" method="post" action="research.asp">
                        <tr>
                          <td height=5></td>
                        </tr>
                      <tr>
                        <td align=middle><%set rs=server.CreateObject("adodb.recordset")
rs.open "select * FROM BJX_class1 order by anclassidorder",conn,1,1
%><select class=wenbenkuang name="anclassid" style="WIDTH: 100px">
        <option value="0">所有分类</option>
        <%do while not rs.eof%>
        <option value="<%=rs("anclassid")%>"><%=trim(rs("anclass"))%></option><%rs.movenext
loop
rs.close
set rs=nothing%></select></td>
                        <td  style="0: 0:0:5" 
                                align=middle width=220><div align="center">
                          <input style="WIDTH: 200px" class=wenbenkuang name="searchkey">
                        </div></td>
                        <td  style="0: 0:0:5" 
                                width=61><input name="image3" type=image src="images/2_btn_search.gif" alt=SEARCH 
                                width=47 height=21 
                                border=0></td>
                        <td _link style="0: 0:0:5" 
                                align=middle><img height=6 
                                src="images/search_bullet.gif" width=3 
                                align=absMiddle><span class=basic_small>
						<a target="_blank" href="search.asp">高级搜索</a> </span></td>
                        <td _link style="0: 0:0:5" 
                                align=middle>·<a target="_blank" href="Class_view.asp?lx=hot" target="_blank">最热产品</a>·<a target="_blank" href="Class_view.asp?lx=tejia" target="_blank">特价产品</a>·<a target="_blank" href="Class_view.asp?lx=news" target="_blank">新上产品</a>··<a target="_blank" href="bookorder.asp" target="_blank">商品排行</a>·<a target="_blank" href="Class_view.asp" target="_blank">全部产品</a></td>
                    </form></table>
</TD>
                </TR>
              </TBODY>
              <tr>
                <td height=5></td>
              </tr>
              <tr>
                <td bgcolor=#c2c2c2 height=1></td>
              </tr>
              <tr>
                <td height="25"><div align="left">&nbsp;&nbsp;<strong>商品品牌：</strong>
                            <%  
	set rs=server.createobject("adodb.recordset")
	rs.open "select * from BJX_pingpai where tuijian=1 order by pingpaiorder",conn,1,1
    if rs.recordcount>0 then
	for i=1 to rs.recordcount
%><a href="research.asp?action=2&anclassid=0&selectname=<%=trim(rs("pingpainame"))%>&jiage=1000000"><font color=blue><%=trim(rs("pingpainame"))%></font></a>&nbsp;&nbsp;<%
rs.movenext
next
end if
%></div></td>
              </tr>
          </TABLE></TD>
        </TR>
      </TBODY>
      </TABLE>