<%startime=timer()%>
<!--#include file="code_conn.asp"-->
<SCRIPT
src="common.js"
type=text/javascript></SCRIPT>
<html>
<head>
<meta http-equiv="Content-Language" content="zh-cn">
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<title>code_list</title>
<link href="hjg_henry_db/jjww.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
body {
background-image: url(hjg_henry_db/back.jpg);
}
-->
</style></head>
<body>
<table width="768" border="0" cellpadding="0" cellspacing="0" bgcolor="#6699cc" align="center">
<tr>
<td width="100%" height="300" align="center" valign="top">
<table border="0" width="33%" height="169">
<tr>
<td width="160%" height="30" colspan="2">
<p align="center" class="big">code_list
</td>
</tr>
<tr align="center" valign="middle">
<td height="20" colspan="2">
<form name="form1" method="post" action="code_search_list.asp">
<table width="86%" border="0">
<tr>
<td width="28%" align="center">code_search</td>
<td width="27%" align="center"><input name="key_word" type="text" id="key_word" size="12"></td>
<td width="25%" align="center"><select name="select" size="1">
<option value="1" selected>code_name</option>
<option value="2">key_word</option>
</select></td>
<td width="20%" height="30"><select name="typeid" size="1">
<option value="-2" selected>全部类别</option>
<%
set typers=conn.execute("select * from code_type")
do while not typers.eof
%>
<option value="<%=typers(0)%>" ><%=typers(1)%></option>
<%
typers.movenext
loop
typers.close()
set typers=nothing
%>
</select>
</td>
</tr>
<tr>
<td height="30" colspan="4" align="center"><input name="B1" type="submit" class="small" value="search">
<input name="page" type="hidden" id="page" value="<% if request("page")="" then
response.Write 1
else
response.Write request("page")
end if%>"></td>
</tr>
</table>
</form>
</td>
</tr>
<td width="160%" height="1" colspan="2"><a href="title_list.asp">题目列表</a>
<%
Set rs= Server.CreateObject ("ADODB.RecordSet")
sql="select * from code_search order by order_id desc"
rs.open sql,conn,1,1
if rs.eof then
response.write "nothing!"
else
total=rs.recordcount
if not isnumeric(request("page")) or isempty(request("page")) then
page=1
else
page=int(abs(request("page")))
end if
rs.pagesize=5 '每页显示的记录数
mypagesize=rs.pagesize
Pcount=rs.pagecount
rs.absolutepage=page
dim i
i=1
do while not rs.eof and mypagesize>0
order_id=rs("order_id")
code_name=rs("code_name")
code_detail= rs("code_detail")
id = rs("id")
%>
</td>
<tr>
<td width="160%" height="20">
<p align="center">order_id</p>
</td>
<td width="160%" height="20" align="left">
<%=i+(page-1)*rs.pagesize%></td>
</tr>
<tr>
<td width="160%" height="20">
<p align="center">code_name</p>
</td>
<td width="160%" height="20"><input type="text" name="code_name" size="20" value="<%=code_name%>"><a href="read.asp?id=<%=id%>" target="_blank"><font color="#FF0000">read it</font></a></td>
</tr><tr>
<td height="20" rowspan="2" align="center" valign="top">code_detail</td>
<td height="9"><textarea id=<%="str"&i%> onMouseOver = this.focus() style="BACKGROUND-COLOR: #d5e9fd" onFocus=this.select() rows="8" name="code_detail" cols="50"><%=Server.HtmlEncode(code_detail)%></textarea><br> </td>
<tr>
<td height="9" align="center"><input type=button onClick=copyCode(<%="str"&i%>) value=复制代码></td>
<tr>
<td width="160%" height="20" colspan="2">
<hr size="1">
</td>
<%
mypagesize=mypagesize-1 '上面提到rs.pagesize=2,mypagesize=rs.pagesize
'mypagesize设定为2 这样只能循环2 次 减为0时跳出循环
i=i+1
rs.movenext
loop
end if
%>
</table>
</td>
</tr>
</table>
<div align="center" valign="top">
<table width="768" border="0" align="center">
<tr>
<td>
<div align="center">
<!--**********************分页开始-->
<%
StartPageNum=1
do while StartPageNum+10<=page:StartPageNum=StartPageNum+10:Loop
EndPageNum=StartPageNum+9
If EndPageNum>Pcount then EndPageNum=Pcount%>
共有<b><%=Pcount%></b>页 你正在浏览第<b><%=page%></b>页 跳到第 [<%if StartPageNum>1 then%><a href="?page=<%=StartPageNum-1%>" title="前十页"><font face="webdings">7</font></a><%end if:For go=StartPageNum to EndPageNum:if go<>page then%> <a href="?page=<%=go%>"><%=go%></a><%else%> <b><%=go%></b><%end if%><%Next:response.write " ":if EndPageNum<Pcount then%><a href="?page=<%=EndPageNum+1%>" title="下十页"><font face="webdings">8</font></a><%end if%>] 页<%if page<>1 then%> <a href=?page=1>首页</a> <a href=?page=<%=page-1%>>上一页</a><%end if%><% if Pcount-page <> 0 then%> <a href=?page=<%=page+1%>>下一页</a> <a href=?page=<%=Pcount%>>尾页</a><%end if%>
<!--**********************分页结束-->
</div>
<br>
<div align="center" valign="top" style="width: 768; height: 19"><a href="add_code_form.asp">add code</a> <a href="adlogin.asp">admin_login</a>
<a href="code.rar">本模块代码</a>
<%endtime=timer()%><br><br>
<a name=bot>本页执行时间<%=FormatNumber((endtime-startime)*1000,3)%>毫秒</a></div>
</table>
</div>
</body>
</html>
<%
rs.close
set rs=nothing
conn.close
set rs=nothing
%>
--------------
<%
'on error resume next
db="Ad_Union_Db" '数据库名称
User_ID="sa" 'User ID=登陆帐号
Pass_word="123456" 'Password=帐号密码
Data_Source="127.0.0.1,1433" 'Data Source=服务名称或者ip
connStr="Provider=SQLOLEDB.1;Network Library=DBMSSOCN;Password='"&pass_word&"';Persist Security Info=True;User ID='"&User_ID&"';Initial Catalog='"&db&"';Data Source='"&Data_Source&"'"
set conn=server.createobject("ADODB.CONNECTION")
conn.open connstr
If Err Then
err.Clear
Set Conn = Nothing
Response.Write "数据库连接出错,请检查连接字串。"'注释,需要把这几个字翻译成英文。
Response.End
End If
param1 = lcase(Request.ServerVariables("QUERY_STRING"))
Filter_SQL param1
param1 = lcase(request.form())
Filter_SQL param1
'response.write "|" & param1 &"|"
'response.end
Function Filter_SQL(strData)
Dim strFilter
Dim blnFlag
Dim i
Dim arrayFilter
strFilter="',;,%3B,//,--,exec,declare,update,insert,select,delete,and,or,char,sysobjects,exchange" '需要过滤的字符,可以自己添,","是分隔符
blnFlag=Flase '过滤标志,如果产生过滤,那么就是真
arrayFilter=Split(strFilter,",")
For i=0 To UBound(arrayFilter)
If Instr(strData,arrayFilter(i))>0 Then
blnFlag=True
Exit For
End If
Next
If blnFlag Then
response.write "请不要使用非法字符!"
response.end
Else
Filter_SQL=strData
End If
End Function
%>