<%
'可修改設(shè)置一：========================定義數(shù)據(jù)庫類別，1為SQL數(shù)據(jù)庫，0為Access數(shù)據(jù)庫=============================
Const IsSqlDataBase = 0
'================================================================================================================
If IsSqlDataBase = 0 Then
dim conn
dim dbpath
set conn=server.createobject("adodb.connection")
DBPath = Server.MapPath("../Data.Mdb")
conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DBPath
Else
dim connstr
Dim strSQLServerName
Dim strSQLDBUserName
Dim strSQLDBPassword
Dim strSQLDBName
strSQLServerName = "127.0.0.1"      '服務(wù)器名稱或地址
strSQLDBUserName = "sa"             '數(shù)據(jù)庫帳號(hào)
strSQLDBPassword = "baichi"               '數(shù)據(jù)庫密碼
strSQLDBName = "jdwin"             '數(shù)據(jù)庫名稱
on error resume next
Set conn = Server.CreateObject("ADODB.Connection")
connstr = "Provider=SQLOLEDB.1;Persist Security Info=False;Server=" & strSQLServerName & ";User ID=" & strSQLDBUserName & ";Password=" & strSQLDBPassword & ";Database=" & strSQLDBName & ";"
conn.open connstr
End IF
if err.number<>0 then
	response.write "出錯(cuò)了，錯(cuò)誤描述："&err.description & "<br>錯(cuò)誤來源"& err.source
	response.End()
end if
%>
<%'***********************************************
'過程名：checksql
'作  用：過濾惡意字符以及html語法
'參  數(shù)：str  ----待處理的字符串
'       strtype ----過濾方式,1為數(shù)字,2為html過濾,3為不過濾html
'返回值:過濾了的字符
'***********************************************
Function checksql(str,strtype)
str=""&str
str=Trim(str)
str=replace(str,"'","''")
str = Replace(str, CHR(32), "&nbsp;")
str = Replace(str, CHR(9), "&nbsp;")
str=Replace(str, CHR(10) & CHR(10), "</P><P> ")
str=Replace(str, CHR(10), "<BR> ")			
str=Replace(str, CHR(13), "")
if strtype=1 then
   if isNumeric(str) then
     str=clng(str)
   else
     str=1
   end if
elseif strtype=2 then
  str=replace(str,"<","&lt;")
  str=replace(str,">","&gt;") 
  str=replace(str,CHR(34),"&quot;") 
  str=replace(str," ","&nbsp;")
  str=Replace(str, CHR(39), "&#39;")
elseif strtype=4 then
  str=replace(str,"&","&amp;")
else   
  str=str
end if
  checksql=str
end function
%>