<%
Dim Database,ConnStr

Database = "../data/#data.asa"
ConnStr = "Provider = Microsoft.Jet.OLEDB.4.0;Data Source = " & Server.MapPath(Database)
On Error Resume Next
Set Conn = Server.CreateObject("ADODB.Connection")
    Conn.Open ConnStr
	If Err Then
		err.Clear
		Set DvConn = Nothing
		Response.Write "Dvbbs數據庫連接出錯，請檢查連接字串。" 
		Response.End
	End If

Const RegIspass = 1

Function Req(value)
Dim ParaValue
ParaValue = Trim(Request(value))
If IsNumeric(ParaValue) = True Then
Req = ParaValue
Exit Function
ElseIf InStr(LCase(ParaValue), "select ") > 0 Or InStr(LCase(ParaValue), "insert ") > 0 Or InStr(LCase(ParaValue), "delete from") > 0 Or InStr(LCase(ParaValue), "count(") > 0 Or InStr(LCase(ParaValue), "drop table") > 0 Or InStr(LCase(ParaValue), "update ") > 0 Or InStr(LCase(ParaValue), "truncate ") > 0 Or InStr(LCase(ParaValue), "asc(") > 0 Or InStr(LCase(ParaValue), "mid(") > 0 Or InStr(LCase(ParaValue), "char(") > 0 Or InStr(LCase(ParaValue), "xp_cmdshell") > 0 Or InStr(LCase(ParaValue), "exec master") > 0 Or InStr(LCase(ParaValue), "net localgroup administrators") > 0 Or InStr(LCase(ParaValue), " and ") > 0 Or InStr(LCase(ParaValue), "net user") > 0 Or InStr(LCase(ParaValue), " or ") > 0 Or InStr(LCase(ParaValue), "'") > 0 Or InStr(LCase(ParaValue), "''") > 0 Then
Response.Redirect "/nopage.html"    
Else
Req = ParaValue
End If
End Function
Function Msgs(Txt,Url)
Response.Write "<script>alert('" & Txt & "');location.href='" & Url & "';</script>"
Response.End
End Function

Function DisRndRecord(DisNum,rsBound)
DIM i,ThisRnd
If rsBound < DisNum Then DisNum = rsBound  
For i = 0 To DisNum - 1
  ThisRnd = GetRnd(rsBound) 
  rs.Move(ThisRnd)          
  DisRndRecord = Replace(RS("UserUrl"),vbCrLf,"<br>")&"?"&Rs("ID")
  rs.Move(-ThisRnd)
Next
End Function
Function GetRnd(bound)
DIM ranNum
Randomize()
ranNum=int(bound*rnd)
If Instr(Appeared,"["&ranNum&"]") Then  
  ranNum = getRnd(bound)
End If
Appeared = Appeared & "["&ranNum&"]" 
GetRnd = ranNum
End Function 
%>