<!--#include file="config.asp"-->
<!--#include file="version.asp"-->
<%
Session.CodePage=936
Response.Charset="gb2312"
Session.Timeout=999
on error resume next
'//ACCESS连接
if isdata=0 then
  dbroot=cf_root&"data/"&cf_data&".mdb"
  set conn=Server.CREATEOBJECT("ADODB.CONNECTION") 
  connstr="provider=microsoft.jet.oledb.4.0;data source="&Server.MapPath(dbroot)
  conn.open connstr
end if
'//MSSQL连接
if isdata=1 then
  ConnStr="Provider=Sqloledb; User ID="&sql_user&";Password="&sql_pass&";Initial Catalog="&sql_data&";Data Source="&sql_ip&";" 
  Set conn = Server.CreateObject("ADODB.Connection") 
  conn.open ConnStr 
end if

if Err.Number <> 0 then
		err.clear
		Response.write "数据库连接出错，请检查数据库连接！"
		'Response.write err.description
        Response.End
end if


If EnableStopInjection = True Then
Dim Fy_Post,Fy_Get,Fy_In,Fy_Inf,Fy_Xh,Fy_db,Fy_dbstr
Fy_In = "'|;|and|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare"
Fy_Inf = split(Fy_In,"|")
If Request.Form<>"" Then
  For Each Fy_Post In Request.Form
    For Fy_Xh=0 To Ubound(Fy_Inf)
      If Instr(LCase(Request.Form(Fy_Post)),Fy_Inf(Fy_Xh))<>0 Then
        Response.Write "<Script Language='JavaScript'>alert('警告：参数非法！');</Script>"
        Response.End
      End If
    Next
  Next
End If

If Request.QueryString<>"" Then
  For Each Fy_Get In Request.QueryString
    For Fy_Xh=0 To Ubound(Fy_Inf)
      If Instr(LCase(Request.QueryString(Fy_Get)),Fy_Inf(Fy_Xh))<>0 Then
        Response.Write "<Script Language='JavaScript'>alert('警告：参数非法！');</Script>"
        Response.End
      End If
    Next
  Next
End If
End If

function closes()
   conn.close
   set conn=nothing
end function
%>
