<%dim MQ_NoSqlHack_AllStr,MQ_NoSqlHack_ComeUrlGet,MQ_NoSqlHack_ComeUrlPost,MQ_NoSqlHack_Str
MQ_NoSqlHack_AllStr="'| and |chr(|exec |insert |select |delete from|update |mid(|master."
MQ_NoSqlHack_ComeUrlGet = Request.QueryString
MQ_NoSqlHack_ComeUrlPost = Request.Form
MQ_NoSqlHack_Str = Split(MQ_NoSqlHack_AllStr,"|")
'Post
If MQ_NoSqlHack_ComeUrlPost<>"" then
For Each MQ_NoSqlHack_Post In Request.Form
For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str)
If Instr(LCase(Request.Form(MQ_NoSqlHack_Post)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then
Response.Write("")
Response.End
End if
Next
Next
End if
'Get
If MQ_NoSqlHack_ComeUrlGet<>"" then
For Each MQ_NoSqlHack_Get In Request.QueryString
For MQ_NoSqlHack_i = 0 To Ubound(MQ_NoSqlHack_Str)
If Instr(LCase(Request.QueryString(MQ_NoSqlHack_Get)),MQ_NoSqlHack_Str(MQ_NoSqlHack_i))<>0 Then
Response.Write("")
Response.End
End if
Next
Next
End if
%>
<%
on error resume next
randomize
set conn=server.createobject("adodb.connection")
'conn.open "driver={SQL Server};server=(local);database=yule;"
conn.open "Provider=SQLOLEDB;Integrated Security=SSPI;server=(local);database=yule;"
function GetPhoto(picName,picW,picH,MaxW,MaxH)
if picW>MaxW or picH>MaxH then
if picW/MaxW<=picH/MaxH then
picW=picW*(MaxH/picH)
picH=MaxH
else
picH=picH*(MaxW/picW)
picW=MaxW
end if
end if
GetPhoto="![](" & picName & ")
"
end function
%>
<%
dim googlead,adword,adwordi,adwordj
'on error resume next
if Err Then
set googlead=conn.execute("select keyword from [zydg].dbo.leadbbs_adword order by id desc")
adword=googlead.getrows
else
set googlead=conn.execute("select keyword from [zydg].dbo.leadbbs_adword order by id desc")
adword=googlead.getrows
end if
googlead.close
set googlead=nothing
conn.close
set conn=nothing
err.clear%>
