iheeo_history.asp

易和阳光购物商城 v1.3 | 功能简介 增加了防注入文件

<%if request.Cookies("bjx")("username")="" and request.cookies("bjx")("shjianame")="" then%>
<table width=100% border=0 align=center cellspacing="5" cellpadding="2" class="wenbenkuang" bgcolor="#D9D9D9">
<tr> 
<td height="120" valign="top" bgcolor="#FFFFFF"> 
<table width="95%" border="0" cellspacing="0" cellpadding="1" align="left">
<form name="userlogin" method="post" action="checkuserlogin.asp">
<tr> 
<td height="22"><font color="#999999">顾客您好,购买商品请先登录</font></td>
</tr>
<tr> 
<td>用户名： 
<input type="text" class=wenbenkuang name="username" size="18" style="width:115px;">
</td>
</tr>
<tr> 
<td>密　码： 
<input type="password" class=wenbenkuang name="userpassword" size="18" style="width:115px;">
</td>
</tr>
<tr> 
<td>验证码： 
<input class=wenbenkuang name=verifycode type=text value="<%If GetCode=9999 Then Response.Write "9999"%>" maxLength=4 size=8>
<img src=Iheeo_GetCode.asp>
</td>
</tr>
<tr> 
<td> 
<INPUT class=go-wenbenkuang name="imageField" value="登 陆" type=submit onFocus="this.blur()"> 
<INPUT class=go-wenbenkuang onclick="window.location='reg.asp'" type=reset value="注 册" name=Submit2> 
<INPUT class=go-wenbenkuang onclick="window.location='getpwd.asp'" type=button value="忘 密" name=Submit3> 
</td>
</tr>
</form>
</table>
</td>
</tr>
</table>
<%else%>
<table width="100%" border="0" cellspacing="0" cellpadding="0" align="center" class="wenbenkuang" bgcolor="#DFE2D9">
<%set rs_h=server.createobject("adodb.recordset")
		rs_h.open "select * from BJX_history where username='"&request.Cookies("bjx")("username")&"' and lx=1 order by ltime desc",conn,1,1
		while not rs_h.eof%>
<tr><td height="24" class="table-xia" width="85%">　<%response.write "<a class=a4 href=product.asp?Iheeoid="&rs_h("bookid")&" >"
				if len(trim(rs_h("bookname")))>17 then
				response.write left(trim(rs_h("bookname")),16)&"..."
				else
				response.write trim(rs_h("bookname"))
				end if
				response.write "</a>"
				%>
</td>
</tr>
<%rs_h.movenext
	wend
	rs_h.close
	%>
<tr><td height="25" align="right"><a href="user.asp">返回会员中心</a></td></tr>
</table>
<br>
<%end if%>