<% Response.Expires = -1   
Response.ExpiresAbsolute = Now() - 1   
Response.cachecontrol = "no-cache"   
 %><%

set conn=Server.CreateObject("ADODB.Connection")
conn.Open"driver={microsoft access driver (*.mdb)};dbq="&server.mappath("/tiangang/tiangang.mdb")
Set rs=server.CreateObject("adodb.recordset")
Function safein(Url)
    server_v1 = CStr(Request.ServerVariables("HTTP_REFERER"))
    server_v2 = CStr(Request.ServerVariables("SERVER_NAME"))
    If Mid(server_v1, 8, Len(server_v2))<>server_v2 Then
        response.Write "<script>alert('警告！你正在从外部提交数据！！请立即终止！！\n你的IP已经被记录，如果再次来');</script>"
        Response.Redirect Url
    End If
End Function
squery=lcase(Request.ServerVariables("QUERY_STRING"))
sURL=lcase(Request.ServerVariables("HTTP_HOST"))
 
SQL_injdata =":|;|>|<|--|sp_|xp_|\|dir|cmd|^|(|)|+|$|'|copy|format|and|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
 
SQL_inj = split(SQL_Injdata,"|")
 
For SQL_Data=0 To Ubound(SQL_inj)

next
  function HTMLEncode(fString)
    if not isnull(fString) then
      fString = Replace(fString, ">", "&gt;")
      fString = Replace(fString, "<", "&lt;")
      fString = Replace(fString, CHR(32), "&nbsp;")    '空格
        fString = Replace(fString, CHR(9), "&nbsp;")    'tab键值 
        fString = Replace(fString, CHR(34), "&quot;")    '双引号
        fString = Replace(fString, CHR(39), "&#39;")    '单引号 
        HTMLEncode = fString
    end if
    end function



%>