打开Shoupic.asp代码如下:
<!--#include file="conn.asp"-->
<!--#include file="jbsz.asp"-->
<%dy_id=request.QueryString("id")
if dy_id<>"" then
set rs=server.CreateObject("adodb.recordset")
sql="select * from dy_load where dy_id="&dy_id
rs.open sql,conn,1,1
%>
<title><%=dy_name%>风采</title><body oncontextmenu="return false" onselectstart="return false" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" >
<table width="100%" height="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="100%" align="center" valign="middle"> <img src="<%=rs("dy_content")%>" border="0"></td>
</tr>
</table>
<%
rs.close
set rs=nothing
conn.close
set conn=nothing
end if%>
好象什么都没有过滤,很可怕。再看看其它的,Showdaily.asp,Showwz.asp,Download.asp