²Ù×÷·û¶ªÊ§

ÌÙÌ}ϵÄê–¹â

<!--#include virtual="A_conn/syscode.asp"-->
<%
if request("df")="kong" then session("difang")=empty
'on error resume next
Set Conn=Server.CreateObject("ADODB.Connection")
Connstr="DBQ="+server.mappath("database.asa")+";DRIVER={Microsoft Access Driver (*.mdb)}"
'ConnStr = "Provider = Sqloledb; User ID = sa; Password = rysea2004; Initial Catalog = job; Data Source = (local);"
'ConnStr = "Provider = Sqloledb; User ID = sa; Password = ; Initial Catalog = job; Data Source = ceo;"
Conn.Open connstr
'ÏÔʾÊ×Ò³µ÷ÓÃÐÂÎÅÁÐ±í ¸ñʽ£ºcall shouyenews(n,lang,dalei,xiaolei,wenzhangurl,fuhao)¡¡²ÎÊý£ºn:µ÷ÓöàÉÙÌõ£¬lang:
±êÌⳤ¶È£¬dalei£ºµ÷ÓôóÀ࣬xiaolei:µ÷ÓÃСÀ࣬wenzhangurl:ÏÔʾÐÂÎÅÎÄÕÂÒ³Ã棬fuhao:±êÇ©Ç°ÃæÐÞÊηûºÅ
if application(cstr(day(now()))) = "" then
set rs=server.createobject("ADODB.Recordset")
sql="select count(*) as expr1000 from ¸öÈË×ÊÁÏ"
rs.open sql,conn,1,1
Application("grzl")=rs("expr1000") + 100000
rs.close
set rs=nothing

set rs=server.createobject("ADODB.Recordset")
sql="select count(*) as expr1000 from ÕÐƸÐÅÏ¢"
rs.open sql,conn,1,1
Application("zpxx")=rs("expr1000") + 4000
rs.close
set rs=nothing
set rs=server.createobject("ADODB.Recordset")
sql="select count(*) as expr1000 from ¹«Ë¾×ÊÁÏ"
rs.open sql,conn,1,1
Application("gszl")=rs("expr1000") + 2000
rs.close
set rs=nothing
'ʧЧְλ
' conn.execute("UPDATE ÕÐƸÐÅÏ¢ SET ÕÐƸÐÅÏ¢.״̬ = 'ʧЧ' WHERE ((GATDATE()>=ÕÐƸÐÅÏ¢.·¢²¼ÈÕÆÚ+(ÕÐƸÐÅÏ¢.ÓÐЧʱ¼ä+1)))")
' conn.execute("UPDATE dbo.ÕÐƸÐÅÏ¢ SET dbo.ÕÐƸÐÅÏ¢.·¢²¼ÈÕÆÚ = getdate() from dbo.ÕÐƸÐÅÏ¢ INNER JOIN dbo.¹«Ë¾×ÊÁÏ ON dbo.ÕÐƸÐÅÏ¢.¹«Ë¾Ãû³Æ = dbo.¹«Ë¾×ÊÁÏ.ÕʺŠWHERE dbo.¹«Ë¾×ÊÁÏ.×Ô¶¯¸üÐÂ='yes' and dbo.¹«Ë¾×ÊÁÏ.»áÔ±='¹ó±ö»áÔ±';")
conn.execute("UPDATE ÕÐƸÐÅÏ¢ SET ÕÐƸÐÅÏ¢.״̬ = 'ʧЧ' WHERE ((now()>=ÕÐƸÐÅÏ¢.·¢²¼ÈÕÆÚ+(ÕÐƸÐÅÏ¢.ÓÐЧʱ¼ä+1)))")
conn.execute("UPDATE dbo.ÕÐƸÐÅÏ¢ SET dbo.ÕÐƸÐÅÏ¢.·¢²¼ÈÕÆÚ = now() from dbo.ÕÐƸÐÅÏ¢ INNER JOIN dbo.¹«Ë¾×ÊÁÏ ON dbo.ÕÐƸÐÅÏ¢.¹«Ë¾Ãû³Æ = dbo.¹«Ë¾×ÊÁÏ.ÕʺŠWHERE dbo.¹«Ë¾×ÊÁÏ.×Ô¶¯¸üÐÂ='yes' and dbo.¹«Ë¾×ÊÁÏ.»áÔ±='¹ó±ö»áÔ±';")
application(cstr(day(now()))) = "yes"

'application("online") = 300

end if
%>
<%
If Trim(Request.QueryString) <> "" Then
strTemp = strTemp & "?" & Trim(Request.QueryString)
If Instr(strTemp,"select%20") or Instr(strTemp,"insert%20") or Instr(strTemp,"delete%20") or
Instr(strTemp,"count(") or Instr(strTemp,"drop%20table") or Instr(strTemp,"update%20") or
Instr(strTemp,"truncate%20") or Instr(strTemp,"asc(") or Instr(strTemp,"mid(") or Instr(strTemp,"char(") or
Instr(strTemp,"xp_cmdshell") or Instr(strTemp,"exec%20master") or
Instr(strTemp,"net%20localgroup%20administrators") or Instr(strTemp,":") or Instr(strTemp,"net%20user") or
Instr(strTemp,"'") or Instr(strTemp,"%20or%20") then
Response.Write "·Ç·¨µØÖ·£¡£¡"
response.End()
Response.Write ""
End If
end if
'response.write request.Form
If Trim(Request.form) <> "" Then
strTemp = strTemp & "?" & Trim(Request.form)
If Instr(strTemp,"select+") or Instr(strTemp,"insert+") or Instr(strTemp,"delete+") or Instr(strTemp,"count(") or
Instr(strTemp,"drop+table") or Instr(strTemp,"update+") or Instr(strTemp,"truncate+") or Instr(strTemp,"asc(") or
Instr(strTemp,"mid(") or Instr(strTemp,"char(") or Instr(strTemp,"xp_cmdshell") or Instr(strTemp,"exec+master") or
Instr(strTemp,"net+localgroup+administrators") or Instr(strTemp,":") or Instr(strTemp,"net+user") or
Instr(strTemp,"'") or Instr(strTemp,"+or+") then
Response.Write "·Ç·¨µØÖ·£¡£¡"
response.End()
Response.Write ""
End If
end if
%>



ä¯ÀÀÆ÷Ö´Ðкó·¢ÏÖ


Microsoft OLE DB Provider for ODBC Drivers ´íÎó '80040e14'
[Microsoft][ODBC Microsoft Access Driver] Óï·¨´íÎó (²Ù×÷·û¶ªÊ§) ÔÚ²éѯ±í´ïʽ 'now() from dbo.ÕÐƸÐÅÏ¢ INNER JOIN dbo.¹«Ë¾×ÊÁÏ ON dbo.ÕÐƸÐÅÏ¢.¹«Ë¾Ãû³Æ = dbo.¹«Ë¾×ÊÁÏ.ÕʺÅ' ÖС£

/conn.asp£¬ÐÐ41

°ï°ïæ¿´¿´