%'数据库路径--------------------------------
set Conn=server.createobject("adodb.connection")
Conn.open"provider=microsoft.jet.oledb.4.0;data source=" & server.mappath("Database/#database1#.mdb")
Function RemoveHTML(strHTML)
Dim objRegExp, Match, Matches
Set objRegExp = New Regexp
objRegExp.IgnoreCase = True
objRegExp.Global = True
'取闭合的<>
objRegExp.Pattern = "<.+?>"
'进行匹配
Set Matches = objRegExp.Execute(strHTML)
' 遍历匹配集合,并替换掉匹配的项目
For Each Match in Matches
strHtml=Replace(strHTML,Match.Value,"")
Next
RemoveHTML=strHTML
Set objRegExp = Nothing
End Function
%>
<%'特殊字符过滤------------------------
sub passChk()
dim sql_injdata
SQL_injdata = "and|exec|insert|select|delete|update|count|*|chr|mid|master|truncate|char|declare|or"
SQL_inj = split(SQL_Injdata,"|")
'防止Get方法注入
If Request.QueryString<>"" Then
For Each SQL_Get In Request.QueryString
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then
response.Redirect("../index.asp")
end if
next
Next
End If
'防止Post方法注入
If Request.Form<>"" Then
For Each Sql_Post In Request.Form
For SQL_Data=0 To Ubound(SQL_inj)
if instr(Request.Form(Sql_Post),Sql_Inj(Sql_DATA))>0 Then
response.Redirect("../index.asp")
end if
next
next
end if
end sub
call passChk()
%>
<%'网站配置
dim webtitle,webname,weburl,webemail,address,postcode,phone,copyright,webqq,qqstate,icp,weblogo,gonggao
set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from webinfo",conn,1,1
webtitle=trim(rs("webtitle"))
weburl=trim(rs("weburl"))
webname=trim(rs("webname"))
webemail=trim(rs("webemail"))
keywords=rs("keywords")
description=rs("description")
address=trim(rs("address"))
postcode=trim(rs("postcode"))
phone=trim(rs("phone"))
mobilephone=rs("mobilephone")
fax=rs("fax")
dibu=trim(rs("dibu"))
tjscript=trim(rs("tjscript"))
webqq=trim(rs("webqq"))
qqstate=trim(rs("qqstate"))
qqsite=trim(rs("qqsite"))
icp=trim(rs("icp"))
rs.close
set rs=nothing%>
<%
Sub shouye_news(top,Cla,lk,Clink)
set rs=server.createobject("adodb.recordset")
sql2= "select top "&top&" * from bdnews where nb_id="&Cla&" order by nws_id asc "
rs.open sql2,conn,1,3
if rs.eof then
response.Write"
暂无记录"
else%>
<%
do while not rs.eof
%>
<%
rs.movenext
loop
%>
<%
end if
rs.close
set rs=nothing
end sub
%>
<%
Function idx_txt(big,small,Tnum)
dim Rst
Set Rs=Server.Createobject("Adodb.Recordset")
if big="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" and nws_stop=1 order by nws_order asc"
end if
if big="" and small="" then
sql="select * from bdnews where nws_stop=1 order by nws_order asc"
end if
if big<>"" and small="" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 order by nws_order asc"
end if
if big<>"" and small<>"" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 and ns_id="&small&" order by nws_order asc"
end if
rs.open sql,conn,1,3
if rs.eof then
else
Rst=left(rs("nws_note"),Tnum)
rs.close
set rs=nothing
end if
idx_txt=Rst
end Function
%>
<%
Function ab_txt(big)
dim Rst
Set Rs=Server.Createobject("Adodb.Recordset")
sql="select * from bdnews where nb_id="&big&" order by nws_order asc"
rs.open sql,conn,1,3
if rs.eof then
else
Rst=rs("nws_cont")
rs.close
set rs=nothing
end if
ab_txt=Rst
end Function
%>
<%
Function A_txt(big,small)
dim Rst
Set Rs=Server.Createobject("Adodb.Recordset")
if big="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" order by nws_order asc"
end if
if big="" and small="" then
sql="select * from bdnews where nws_tj=1 order by nws_order asc"
end if
if big<>"" and small="" then
sql="select * from bdnews where nb_id="&big&" order by nws_order asc"
end if
if big<>"" and small<>"" then
sql="select * from bdnews where nb_id="&big&" and ns_id="&small&" order by nws_order asc"
end if
rs.open sql,conn,1,3
if rs.eof then
else
Rst=rs("nws_cont")
rs.close
set rs=nothing
end if
A_txt=Rst
end Function
%>
<%
sub shouye_picgundong(top,big,lk)
set rs=conn.execute("select top "&top&" * from bdnews where nb_id="&big&" and Fileurl<>'' order by nws_id desc")
if rs.eof then
response.Write "无记录"
else
%>
<%do while not rs.eof
if len(rs("nws_title"))>8 then
nws_title=left(rs("nws_title"),8)&"..."
else
nws_title=rs("nws_title")
end if
%>
|
<%
rs.movenext
loop
%>
|
|
<%end if%>
<%end sub%>
<%
Function Get_Bname(big)
if big="" then exit Function
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from nbclass where nb_id="&big&""
rs.open sql,conn,2,3
if rs.eof then
else
Rst=rs("nb_name")
end if
rs.close
set rs=nothing
Get_Bname=Rst
End Function
%>
<%
Function Get_Sname(small)
if small="" then exit Function
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from nsclass where ns_id="&small&""
rs.open sql,conn,2,3
if rs.eof then
else
Rst=rs("ns_name")
end if
rs.close
set rs=nothing
Get_Sname=Rst
End Function
%>
<%
Sub news(big,small,lk,Clink)
dim CurrentPage,TotalPages
MaxPerPage=8
Set Rs1=Server.Createobject("Adodb.Recordset")
if big="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" and nws_stop=1 order by nws_time desc"
end if
if big="" and small="" then
sql="select * from bdnews where nws_stop=1 order by nws_time desc"
end if
if big<>"" and small="" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 order by nws_time desc"
end if
if big<>"" and small<>"" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 and ns_id="&small&" order by nws_time desc"
end if
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
do while not rs1.eof and pp<8
%>
-
<%=day(formatdatetime(rs1("nws_time"),2))%>
<%=year(formatdatetime(rs1("nws_time"),2))%>-<%=month(formatdatetime(rs1("nws_time"),2))%>
<%=left(rs1("nws_note"),100)%>...
<%pp=pp+1
rs1.movenext
loop
rs1.close
set rs1=nothing
%>
<%
end if
end Sub
%>
<%
Sub news2(big,small,lk,Clink)
dim CurrentPage,TotalPages
MaxPerPage=8
Set Rs1=Server.Createobject("Adodb.Recordset")
if big="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" and nws_stop=1 order by nws_id desc"
end if
if big="" and small="" then
sql="select * from bdnews where nws_stop=1 order by nws_id desc"
end if
if big<>"" and small="" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 order by nws_id desc"
end if
if big<>"" and small<>"" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 and ns_id="&small&" order by nws_id desc"
end if
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
end if
end Sub
%>
<%
Sub search_news(Cla,small,lk,Clink,key)
dim CurrentPage,TotalPages
MaxPerPage=12
Set Rs1=Server.Createobject("Adodb.Recordset")
sql="select * from bdnews where nws_title like '%"&key&"%' order by nws_order asc"
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
do while not rs1.eof and pp<12
%>
<%pp=pp+1
rs1.movenext
loop
rs1.close
set rs1=nothing
%>
<%
end if
end Sub
%>
<%
Sub news_pic(big,small,lk,Clink)
dim CurrentPage,TotalPages
MaxPerPage=5
Set Rs1=Server.Createobject("Adodb.Recordset")
if big="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" and nws_stop=1 order by nws_order asc"
end if
if big="" and small="" then
sql="select * from bdnews where nws_stop=1 order by nws_order asc"
end if
if big<>"" and small="" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 order by nws_order asc"
end if
if big<>"" and small<>"" then
sql="select * from bdnews where nb_id="&big&" and nws_stop=1 and ns_id="&small&" order by nws_order asc"
end if
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
end if
end Sub
%>
<%
Sub news_pic1(Cla,small,lk,Clink)
dim CurrentPage,TotalPages
MaxPerPage=8
Set Rs1=Server.Createobject("Adodb.Recordset")
if Cla="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" and nws_stop=1 order by nws_id desc"
end if
if Cla="" and small="" then
sql="select * from bdnews where nws_stop=1 order by nws_id desc"
end if
if Cla<>"" and small="" then
sql="select * from bdnews where nb_id="&Cla&" and nws_stop=1 order by nws_id desc"
end if
if Cla<>"" and small<>"" then
sql="select * from bdnews where nb_id="&Cla&" and nws_stop=1 and ns_id="&small&" order by nws_id desc"
end if
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
do while not rs1.eof and pp<8
%>
&cla=<%=rs1("nb_id")%>&small=<%=rs1("ns_id")%>">
" alt=""/>
-
<%=left(rs1("nws_title"),8)%>
VIEW MORE
<%pp=pp+1
rs1.movenext
loop
rs1.close
set rs1=nothing
%>
<%
end if
end Sub
%>
<%
Sub news_pic2(Cla,small,lk,Clink)
dim CurrentPage,TotalPages
MaxPerPage=12
Set Rs1=Server.Createobject("Adodb.Recordset")
if Cla="" and small<>"" then
sql="select * from bdnews where ns_id="&small&" and nws_stop=1 order by nws_id desc"
end if
if Cla="" and small="" then
sql="select * from bdnews where nws_stop=1 order by nws_id desc"
end if
if Cla<>"" and small="" then
sql="select * from bdnews where nb_id="&Cla&" and nws_stop=1 order by nws_id desc"
end if
if Cla<>"" and small<>"" then
sql="select * from bdnews where nb_id="&Cla&" and nws_stop=1 and ns_id="&small&" order by nws_id desc"
end if
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
end if
end Sub
%>
<%
Function N_show()
dim Rst,Thex
Thex=request("Thex")
if Thex="" then exit Function
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from bdnews where nws_id="&Thex&""
rs.open sql,conn,2,3
if rs.eof then
else
Rst=Rst&""&rs("nws_title")&"
"
Rst=Rst&rs("nws_cont")
end if
rs.close
set rs=nothing
N_show=Rst
End Function
%>
<%
Function Get_Cname(Cla)
if Cla="" then exit Function
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from Cbclass where cb_id="&Cla&""
rs.open sql,conn,2,3
if rs.eof then
else
Rst=rs("cb_name")
end if
rs.close
set rs=nothing
Get_Cname=Rst
End Function
%>
<%
Function Get_Xname(small)
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from Csclass where cs_id="&small&""
rs.open sql,conn,2,3
if rs.eof then
else
Rst=" >> "&rs("cs_name")
end if
rs.close
set rs=nothing
Get_Xname=Rst
End Function
%>
<%
Sub thecp(Cla,small,pclink)
dim CurrentPage,TotalPages
MaxPerPage=12
Set Rs1=Server.Createobject("Adodb.Recordset")
if Cla="" and small="" then
sql="select * from bdcp where cxp_stop=1 order by cxp_id desc"
end if
if Cla="" and small<>"" then
sql="select * from bdcp where cs_id="&small&" and cxp_stop=1 order by cxp_id desc"
end if
if Cla<>"" and small="" then
sql="select * from bdcp where cb_id="&Cla&" and cxp_stop=1 order by cxp_id desc"
end if
if Cla<>"" and small<>"" then
sql="select * from bdcp where cb_id="&Cla&" and cxp_stop=1 and cs_id="&small&" order by cxp_id desc"
end if
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
End if
end Sub
%>
<%
Sub search_cp(Cla,small,pclink,key)
dim CurrentPage,TotalPages
MaxPerPage=12
Set Rs1=Server.Createobject("Adodb.Recordset")
sql="select * from bdcp where cxp_name like '%"&key&"%' or cxp_cont like '%"&key&"%' order by cxp_order asc"
rs1.open sql,conn,1,3
if rs1.eof then
response.Write("暂时无相关信息!")
else
rs1.pagesize=MaxPerPage
If trim(Request("Page"))<>"" then
CurrentPage= CLng(request("Page"))
If CurrentPage> rs1.PageCount then
CurrentPage = rs1.PageCount
End If
Else
CurrentPage= 1
End If
totalPut=rs1.recordcount
if CurrentPage<>1 then
if (currentPage-1)*MaxPerPage < totalPut then
rs1.move(currentPage-1)*MaxPerPage
end if
end if
%>
<%
End if
end Sub
%>
<%
Sub shouyepro(Cla,small,pclink)
page=Request.QueryString("page")
If page="" Then page="1"
page=Cint(page)
Set rs = Server.CreateObject("Adodb.RecordSet")
if Cla="" and small="" then
sql="select * from bdcp where cxp_stop=1 order by cxp_order asc"
end if
if Cla="" and small<>"" then
sql="select * from bdcp where cs_id="&small&" and cxp_stop=1 order by cxp_order asc"
end if
if Cla<>"" and small="" then
sql="select * from bdcp where cb_id="&Cla&" and cxp_stop=1 order by cxp_order asc"
end if
if Cla<>"" and small<>"" then
sql="select * from bdcp where cb_id="&Cla&" and cxp_stop=1 and cs_id="&small&" order by cxp_order asc"
end if
rs.cursorlocation=3
rs.open sql,conn,2,3
rs.PageSize=12
tcount=rs.RecordCount
tpage=rs.PageCount
If rs.Bof And rs.Eof Then
%>
无相关信息!
<%
Else%>
<%
rs.Move (page-1)*rs.pagesize
For i = 1 to 2
If rs.Eof Then Exit For
%>
<%
For j = 1 to 4
If rs.Eof Then Exit For
%>
|
| [<%=left(rs("cxp_name"),10)%>] |
|
<%
rs.MoveNext
Next
%>
<%
Next
%>
<%
End if
end Sub
%>
<%
Function P_show()
dim Rst,Thex
Thex=request("Thex")
if Thex="" then exit Function
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from bdcp where cxp_id="&Thex&""
rs.open sql,conn,2,3
if rs.eof then
else
Rst=Rst&""&rs("cxp_name")&"
"
Rst=Rst&rs("cxp_cont")
end if
rs.close
set rs=nothing
P_show=Rst
End Function
%>
<% sub flash_bian(Cla,url,w,h) %>
<%dim thenum
set rsx = server.CreateObject ("adodb.recordset")
Sql = "Select * from bdnews where nb_id="&cla&" and Fileurl<>'"&""&"' order By nws_order asc"
rsx.open sql,conn,1,3
if not rsx.eof then
thenum=rsx.recordcount
if thenum>=6 then thenum=6
for i=1 to thenum
'links1=links1&""&url&"?thex="&rsx("nws_ID")&"|"
'links1=links1&rsx("nws_link")&"|"
links1=links1&"|"
pics1=pics1&""&mid(rsx("Fileurl"),7)&"|"
texts1=texts1&rsx(1)&"|"
rsx.movenext
if rsx.eof then exit for
next
rsx.close
set rsx=nothing
if instr(right(links1,1),"|")>0 then
links1=left(links1,len(links1)-1)
texts1=left(texts1,len(texts1)-1)
pics1=left(pics1,len(pics1)-1)
end if
end if%>
<% end sub %>
<%Sub flash_bian1(w,h)
dim thenum
set rsx = server.CreateObject ("adodb.recordset")
Sql = "Select * from bdcp where cxp_tj=1 and Fileurl<>'"&""&"' order By cxp_order asc"
rsx.open sql,conn,1,3
if not rsx.eof then
thenum=rsx.recordcount
if thenum>=5 then thenum=5
for i=1 to thenum
links1=links1&"Pshow.asp?thex="&rsx("cxp_ID")&"|"
pics1=pics1&replace(rsx("Fileurl"),"../../","")&"|"
texts1=texts1&rsx("cxp_name")&"|"
rsx.movenext
if rsx.eof then exit for
next
rsx.close
set rsx=nothing
if instr(right(links1,1),"|")>0 then
links1=left(links1,len(links1)-1)
texts1=left(texts1,len(texts1)-1)
pics1=left(pics1,len(pics1)-1)
end if
end if%>
<%end Sub%>
<%Sub left_cla(Cla,lk)
Set rs = Server.CreateObject("Adodb.RecordSet")
sql="select * from nsclass where nb_id="&Cla&" order by ns_order asc"
rs.open sql,conn,2,3
if rs.eof then
else
do while not rs.eof%>
&Cla=<%=rs("nb_id")%>" class="black12"><%=left(rs("ns_name"),5)%>
<%rs.movenext
loop
rs.close
set rs=nothing%>
<%
End if
End Sub
%>