?using System;
using System.Data;
using System.Data.OleDb;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class News_more : System.Web.UI.Page
{
    public string Titlep;
    public string Descriptionp;
    public string Keywordsp;
    protected void Page_Load(object sender, EventArgs e)
    {
        string ID =FunStr(Request.QueryString["ID"].ToString());
        OleDbConnection myconn = DB.CreateDB();
        myconn.Open();
        OleDbCommand cmd = new OleDbCommand("select * from product where id="+ID, myconn);
        //OleDbDataAdapter Adapter = new OleDbDataAdapter(cmd);
        //DataSet ds = new DataSet();
        //Adapter.Fill(ds);
        //DataTable Table = ds.Tables[0];
        //if (Table.Rows.Count > 0)
        //{
        //    DataRow row = Table.Rows[0];
        //    Label1.Text = Convert.ToString(row["title"]);
        //}
        //title,des,con
        GetContent drt = new GetContent();
        OleDbDataReader drf = drt.GetTDC();
        while (drf.Read())
        {
            this.Titlep = drf["Title"].ToString();
            this.Descriptionp = drf["Description"].ToString();
            this.Keywordsp = drf["Keywords"].ToString();
        }
        drf.Close();
        OleDbDataReader dr = cmd.ExecuteReader();
        if (dr.Read())
        {
            Ltitle.Text = dr["title"].ToString();
            Lcontent.Text = dr["content"].ToString();
        }
        dr.Close();
        myconn.Close();
    }
    public static string FunStr(string str)
    {
        str = str.Replace("&", "");
        str = str.Replace("<", "");
        str = str.Replace(">", "");
        str = str.Replace("'", "");
        str = str.Replace("*", "");
        str = str.Replace("\n", "");
        str = str.Replace("\r\n", "");
        str = str.Replace("?", "");
        str = str.Replace("select", "");
        str = str.Replace("insert", "");
        str = str.Replace("update", "");
        str = str.Replace("delete", "");
        str = str.Replace("create", "");
        str = str.Replace("drop", "");
        str = str.Replace("delcare", "");
        str = str.Replace("   ", "");

        str = str.Trim();
        if (str.Trim().ToString() == "")
            str = "無";
        return str;
    } 
}