<% '------------------sql zhuru '-----------防注入代码---------------- '--------定义部份------------------ 'Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr '自定义需要过滤的字串,用 "|||" 分隔 Fy_In = "'|||;|||and|||exec|||insert|||select|||delete|||update|||count|||*|||%|||chr|||mid|||master|||truncate|||char|||declare" '---------------------------------- Fy_Inf = split(Fy_In,"|||") '--------POST部份------------------ If Request.Form<>"" Then For Each Fy_Post In Request.Form For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If '---------------------------------- '--------GET部份------------------- If Request.QueryString<>"" Then For Each Fy_Get In Request.QueryString For Fy_Xh=0 To Ubound(Fy_Inf) If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then response.redirect "http://www.it168.com" End If Next Next End If ''''''''''-----------sql end %> <% '''''''''''''''''''''''''''''''''' ' 050324 ' lsh '''''''''''''''''''''''''''''''''' %> <% keyword1 = replacestr(trim(request("keyword"))) if keyword1="微软" then title="微软_软件专区_IT168.COM" ELSEIF KEYWORD1="ERP" THEN TITLE="ERP_软件专区_IT168.COM" ELSEIF KEYWORD1="office" THEN TITLE="OFFICE_软件专区_IT168.COM" ELSEIF KEYWORD1="病毒" THEN TITLE="病毒_软件专区_IT168.COM" ELSE TITLE="软件专区_IT168.COM" END IF %>

精彩应用文章 推荐软件下载 今日更新文章 　当前位置：首页 > 软件产品专区 > 搜索结果 <%call searchresult()%>

<% function readPositionCode(cPositionCode) dim funstr if cPositionCode <> "" then set fs=server.createobject("scripting.filesystemobject") filepath="d:\udcweb_2003\2005software\txt\2005doc_"&cPositioncode&".txt" 'response.write cPositionCode set mytextfile=fs.opentextfile(filepath) funstr = mytextfile.ReadAll mytextfile.close set mytextfile=nothing set fs=nothing readPositionCode = funstr else readPositionCode = "loading......" end if end function sub searchresult() ' 参数读取 dim keyword, ckeyCondition, scope, cdoc_type keyword = replacestr(trim(request("keyword"))) if isnull(keyword) then keyword = "" ckeyCondition = replacestr(trim(request("ckeyCondition"))) if isnull(ckeyCondition) then ckeyCondition = "" scope = replacestr(trim(request("scope"))) if isnull(scope) then scope = "" cdoc_type = replacestr(trim(request("cdoc_type"))) if isnull(cdoc_type) then cdoc_type = "" if cdoc_type = "全部" then cdoc_type = "" adoconn csql = "select distinct a.cdoc_id,p.ctitle,a.cPush_Date" csql = csql & " FROM tbl_article a right outer join tbl_position_article p on a.cdoc_id=p.cdoccode left outer join tbl_article_pic c on a.cdoc_id=c.cdoc_id " csql = csql & "WHERE a.c2 <> '1' and a.c2 <> '3' " csql = csql & "and right(a.cdoc_id,2) = '01' " csql = csql & "and a.cPush_Date <= CONVERT(char(10), GETDATE(), 20) " if lcase(ckeyCondition) = "memo" then csql = csql & "and (c.ckey like '%"&keyword&"%' or a.cmemo like '%"&keyword&"%') " else csql = csql & "and (c.ckey like '%"&keyword&"%' or a.ctitle like '%"&keyword&"%') " end if if lcase(scope) <> "all" and scope <> "" then csql = csql & "and a.cChanNelCode = '22' " end if if cdoc_type <> "" then csql = csql & "and a.cdoc_type = '"&cdoc_type&"' " end if csql = csql & " order by a.cDoc_id Desc" 'response.write csql udc_rs.open csql,udc_conn,3 str = str & ""&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "

"&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " 　　　　关键字：“"&keyword&"”  搜索结果 "&vbcrlf str = str & "

"&vbcrlf if not udc_rs.eof then page = request("page") if isnull(page) or page="" then page=1 udc_rs.pagesize=30 iCount=udc_rs.recordcount pages=(icount+udc_rs.pagesize-1)\udc_rs.pagesize udc_rs.absolutepage=page i = 0 str = str & ""&vbcrlf while not udc_rs.eof and i < udc_rs.pagesize if i mod 6 = 0 and i > 0 then str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf end if str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf udc_rs.movenext i = i + 1 wend str = str & "

·"&udc_rs("ctitle")&"　("&udc_rs("cPush_Date")&")

"&vbcrlf response.write str ' 调用翻页子程序 parastr = "keyword="&keyword if ckeyCondition <> "" then parastr = parastr & "&ckeyCondition="&ckeyCondition if scope <> "" then parastr = parastr & "&scope="&scope if cdoc_type <> "" then parastr = parastr & "&cdoc_type="&cdoc_type call changepage(pages,page,parastr) else str = str & ""&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "

没有相关内容被搜索到！

"&vbcrlf response.write str end if end sub sub changepage(pages,page,parastr) str = "" str = str & ""&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & " "&vbcrlf str = str & "

"&vbcrlf if page > 1 then str = str & "上一页"&vbcrlf else str = str & "上一页"&vbcrlf end if if int(page) < int(pages) then str = str & "下一页"&vbcrlf else str = str & "下一页"&vbcrlf end if str = str & "选择页码："&vbcrlf if int(page)>((page-1)\10)*10 and page>10 then str = str & "上十页"&vbcrlf end if if ((int(page)-1)\10)*10 + 10 > pages then endpage = pages else endpage = ((int(page)-1)\10)*10 + 10 end if for i = ((int(page)-1)\10)*10+1 to endpage if i = int(page) then str = str & ""&i&" "&vbcrlf else str = str & ""&i&" "&vbcrlf end if next if endpage <> pages then str = str & "下十页"&vbcrlf end if str = str & "

"&vbcrlf response.write str end sub %>