<!--#include file="../include/safe.asp"-->
<%
strtemp=request.servervariables("server_name")&request.servervariables("url")&"?"&request.querystring
strtemp = lcase(strtemp) 
if instr(strtemp,"select%20") or instr(strtemp,"insert%20") or instr(strtemp,"delete%20from") or instr(strtemp,"count(") or instr(strtemp,"drop%20table") or instr(strtemp,"update%20") or instr(strtemp,"truncate%20") or instr(strtemp,"asc(") or instr(strtemp,"mid(") or instr(strtemp,"char(") or instr(strtemp,"xp_cmdshell") or instr(strtemp,"exec%20master") or instr(strtemp,"net%20localgroup%20administrators") or instr(strtemp,"net%20user") or instr(strtemp,"%20or%20") or instr(strtemp,"'") or instr(strtemp,"%20") or instr(strtemp,"""") or instr(strtemp,"“") or instr(strtemp,"”")  or instr(strtemp,":") or instr(strtemp,"：")  or instr(strtemp,";") or instr(strtemp,"；")  or instr(strtemp,",") or instr(strtemp,"，")  or instr(strtemp,"（")  or instr(strtemp,"）")  or instr(strtemp,"、")  or instr(strtemp,"\")  or instr(strtemp,"`")  or instr(strtemp,"^")  or instr(strtemp,"*")  or instr(strtemp,"~")  or instr(strtemp,"-") or instr(strtemp,"%27") then 
response.write "<script language='javascript'>alert('对不起，不可以包含特殊字符！');history.back();</script>" 
response.end
end if 
%>
<%
'on error resume next
'StrSQL="DBQ="+server.mappath("../basedata/xb.mdb")+";DRIVER={Microsoft Access Driver (*.mdb)};"
'set conn=server.createobject("ADODB.CONNECTION")
'conn.open StrSQL

dim conn
	dim connstr
	dim db
	db="../include/#adsf#@$.mdb"
	Set conn = Server.CreateObject("ADODB.Connection")
	connstr="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(db)
	conn.Open connstr

sub CloseConn()
	conn.close
	set conn=nothing
end sub
function decrypt(dcode)	
dim texts
dim i
for i=1 to len(dcode)
texts=texts & chr(asc(mid(dcode,i,2))-i)
next
decrypt=texts
end function
function encrypt(ecode)
Dim texts
dim i
for i=1 to len(ecode)
texts=texts & chr(asc(mid(ecode,i,2))+i)
next
encrypt = texts
end function
%>