<%dim MQ_NoSqlHack_AllStr,MQ_NoSqlHack_ComeUrlGet,MQ_NoSqlHack_ComeUrlPost,MQ_NoSqlHack_Str MQ_NoSqlHack_AllStr="'| and |chr(|exec |insert |select |delete from|update |mid(|master." MQ_NoSqlHack_ComeUrlGet = Request.QueryString MQ_NoSqlHack_ComeUrlPost = Request.Form MQ_NoSqlHack_Str = Split(MQ_NoSqlHack_AllStr,"|") 'Post If MQ_NoSqlHack_ComeUrlPost<>"" then For Each MQ_NoSqlHack_Post In Request.Form For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str) If Instr(LCase(Request.Form(MQ_NoSqlHack_Post)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then Response.Write("") Response.End End if Next Next End if 'Get If MQ_NoSqlHack_ComeUrlGet<>"" then For Each MQ_NoSqlHack_Get In Request.QueryString For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str) If Instr(LCase(Request.QueryString(MQ_NoSqlHack_Get)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then Response.Write("") Response.End End if Next Next End if %> <% on error resume next randomize set conn=server.createobject("adodb.connection") 'conn.open "driver={SQL Server};server=(local);database=yule;" conn.open "Provider=SQLOLEDB;Integrated Security=SSPI;server=(local);database=yule;" function GetPhoto(picName,picW,picH,MaxW,MaxH) if picW>MaxW or picH>MaxH then if picW/MaxW<=picH/MaxH then picW=picW*(MaxH/picH) picH=MaxH else picH=picH*(MaxW/picW) picW=MaxW end if end if GetPhoto="" end function %> <% dim googlead,adword,adwordi,adwordj 'on error resume next if Err Then set googlead=conn.execute("select keyword from [zydg].dbo.leadbbs_adword order by id desc") adword=googlead.getrows else set googlead=conn.execute("select keyword from [zydg].dbo.leadbbs_adword order by id desc") adword=googlead.getrows end if googlead.close set googlead=nothing conn.close set conn=nothing err.clear%>

<% Randomize adwordi=Int(Rnd(1)*Ubound(adword,2)+1) adwordj=0 for adwordi=adwordi to Ubound(adword,2) if adwordj<=4 then response.write ""&adword(Ubound(adword),adwordi)&"、" adwordj=adwordj+1 next%>

<% Randomize adwordi=Int(Rnd(1)*Ubound(adword,2)+1) adwordj=0 for adwordi=adwordi to Ubound(adword,2) if adwordj<=12 then response.write ""&adword(Ubound(adword),adwordi)&"、" adwordj=adwordj+1 next%>