<%width=40
height=40
%>
<!--#include file="up.asp"--><!--#include file="fun.asp"--><!--#include file="md5.asp"-->
<style>TABLE {BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: 1px; }TD {BORDER-RIGHT: 0px; BORDER-TOP: 0px;}</style>
<br><br><%
function strLength(str)
       ON ERROR RESUME NEXT
       dim WINNT_CHINESE
       WINNT_CHINESE    = (len("論壇")=2)
       if WINNT_CHINESE then
          dim l,t,c
          dim i
          l=len(str)
          t=l
          for i=1 to l
             c=asc(mid(str,i,1))
             if c<0 then c=c+65536
             if c>255 then
                t=t+1
             end if
          next
          strLength=t
       else 
          strLength=len(str)
       end if
       if err.number<>0 then err.clear
end function
function ubbg(str)
dim re
	Set re=new RegExp
	re.IgnoreCase=true
	re.Global=True
re.Pattern="(height|javascript|jscript:|js:|value|about:|file:|document.cookie|vbscript:|vbs:|script|width|)"
str=re.Replace(str,"")

re.Pattern="(on(mouse|exit|error|click|key))"
str=re.Replace(str,"")
re.Pattern="(&#)"
str=re.Replace(str,"＆＃")

set re=Nothing
ubbg=str
end function
sty="<P style='MARGIN: 8px'>"
t1="<div align=center><center><table border=1 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bordercolor="&c1&" width=98% ><tr><td width=100% background=pic/"&sp&"3.gif height=25 bgcolor="&c1&">&nbsp;<img border=0 src=pic/fl.gif> <font color=#FFFFFF><b>"
t2="</b></font></td></tr>"
d1="<tr><td width=100% ><P style='MARGIN: 14px'>"
d2="</td></tr></table></center></div>"
newpwd=Replace(Request.Form("newpwd"),"'","''")
repwd=Replace(Request.Form("repwd"),"'","''")
email=Replace(Request.Form("email"),"'","''")
question=Replace(Request.Form("question"),"'","''")
questionok=Replace(question," ","")
old=Replace(Request.Form("old"),"'","''")
answer=Replace(Request.Form("answer"),"'","''")
answerok=Replace(answer," ","")
sex=Replace(Request.Form("sex"),"'","''")
burn11=Request.Form("burn11")
burn12=Request.Form("burn12")
burn13=Request.Form("burn13")
home=Replace(Request.Form("home"),"'","''")
qq=Replace(Request.Form("qq"),"'","''")
toupic=Replace(Request.Form("toupic"),"'","''")
mypic=Replace(Request.Form("mypic"),"'","''")
mypic=ubbg(mypic)
ch=Replace(Request.Form("ch"),"'","''")
ku=Replace(Request.Form("ku"),"'","''")
gxqm=Request.Form("gxqm")
gxqm=Replace(left(gxqm,255),"'","''")
set canl=myconn.execute("select*from [user] where name='"&lgname&"' and password='"&lgpwd&"'")
if canl.eof or canl.bof then
%>
<%=t1%>錯(cuò) 誤 信 息<%=t2&d1%>·你還沒(méi)有登陸或者你登陸的用戶名或密碼錯(cuò)誤！·<%=d2%><%
response.end
end if
anan=canl("answer")
if strlength(newpwd)>16 or Instr(newpwd,"=")>0 or Instr(newpwd,"%")>0 or Instr(newpwd,chr(32))>0 or Instr(newpwd,"?")>0 or Instr(newpwd,"&")>0 or Instr(newpwd,";")>0 or Instr(newpwd,",")>0 or Instr(newpwd,"'")>0 or Instr(newpwd,",")>0 or Instr(newpwd,chr(34))>0 or Instr(newpwd,chr(9))>0 or Instr(newpwd,"