<%'/字符過濾/
function changechr(str) 
    changechr=replace(replace(replace(replace(str,"<",""),">",""),chr(13),"")," ","") 
    changechr=replace(replace(replace(replace(changechr,"'",""),chr(34),""),"insert",""),"and","") 
    changechr=replace(replace(replace(replace(changechr,"select",""),"update",""),"delete%20from",""),"exec","") 
    changechr=replace(replace(replace(replace(changechr,"mid",""),"truncate",""),"declare",""),"*","")
end function
function GetIp()
	'如果客戶端用了代理服務器，則應該用ServerVariables("HTTP_X_FORWARDED_FOR")方法
	getclientip = Request.ServerVariables("HTTP_X_FORWARDED_FOR")
	If getclientip = "" Then
		'如果客戶端沒用代理，應該用Request.ServerVariables("REMOTE_ADDR")方法
		getclientip = Request.ServerVariables("REMOTE_ADDR")
	end if
	GetIp = getclientip
end function

sub addhw()
set rdsInfo=server.createobject("adodb.recordset")
sqltext="select * from hw"
rdsInfo.open sqltext,conn,3,3
	rdsInfo.AddNew
	rdsInfo("title") =changechr(Request.Form("title"))
	rdsInfo("hwname") =changechr(Request.Form("hwname"))
	rdsInfo("ckyj") = changechr(Request.Form("ckyj"))
	rdsInfo("hwzl") = changechr(Request.Form("hwzl"))
	rdsInfo("hwbz") = changechr(Request.Form("hwbz"))
	rdsInfo("始發地") = changechr(Request.Form("始發地"))
	rdsInfo("始發市") = changechr(Request.Form("始發市"))
	rdsInfo("目的地") = changechr(Request.Form("目的地"))
	rdsInfo("目的市") = changechr(Request.Form("目的市"))
	rdsInfo("mdqx") =changechr(Request.Form("mdqx"))
	rdsInfo("sfqx") =changechr(Request.Form("sfqx"))
	rdsInfo("yxq") = changechr(Request.Form("yxq"))
	rdsInfo("bz") = changechr(Request.Form("bz"))
	rdsInfo("name") =changechr(Request.Form("name"))
	rdsInfo("qq") = changechr(Request.Form("qq"))
	rdsInfo("phone") = changechr(Request.Form("phone"))
	rdsInfo("post") = changechr(Request.Form("post"))
	rdsInfo("mobile") = changechr(Request.Form("mobile"))
	rdsInfo("fax") = changechr(Request.Form("fax"))
	rdsInfo("email") = changechr(Request.Form("email"))
	rdsInfo("web") = changechr(Request.Form("web"))
	rdsInfo("bz") =changechr(Request.Form("bz"))
	rdsInfo("address") = changechr(Request.Form("address"))
	rdsInfo("ip") =GetIp()
	rdsInfo("userid") =Session("userid")
	rdsInfo.Update
Response.write("<script>alert(""信息添加成功！"");location.href=""index.asp"";</script>")
Response.end
	rdsInfo.Close
	conn.close
	set rdsInfo = nothing
	set conn=nothing
end sub
sub addkc()
set rdsInfo=server.createobject("adodb.recordset")
sqltext="select * from kc"
rdsInfo.open sqltext,conn,3,3
	rdsInfo.AddNew
	rdsInfo("title") =changechr(Request.Form("title"))
	rdsInfo("hwname") =changechr(Request.Form("hwname"))
	rdsInfo("ckyj") = changechr(Request.Form("ckyj"))
	rdsInfo("hwzl") = changechr(Request.Form("hwzl"))
	rdsInfo("cx") = changechr(Request.Form("cx"))
	rdsInfo("始發地") = changechr(Request.Form("始發地"))
	rdsInfo("始發市") = changechr(Request.Form("始發市"))
	rdsInfo("目的地") = changechr(Request.Form("目的地"))
	rdsInfo("目的市") = changechr(Request.Form("目的市"))
	rdsInfo("bz") =changechr(Request.Form("bz"))
	rdsInfo("mdqx") =changechr(Request.Form("mdqx"))
	rdsInfo("sfqx") =changechr(Request.Form("sfqx"))
	rdsInfo("yxq") = changechr(Request.Form("yxq"))
	rdsInfo("bz") = changechr(Request.Form("bz"))
	rdsInfo("name") =changechr(Request.Form("name"))
	rdsInfo("qq") = changechr(Request.Form("qq"))
	rdsInfo("phone") = changechr(Request.Form("phone"))
	rdsInfo("post") = changechr(Request.Form("post"))
	rdsInfo("mobile") = changechr(Request.Form("mobile"))
	rdsInfo("fax") = changechr(Request.Form("fax"))
	rdsInfo("email") = changechr(Request.Form("email"))
	rdsInfo("web") = changechr(Request.Form("web"))
	rdsInfo("address") = changechr(Request.Form("address"))
	rdsInfo("ip") =GetIp()
	rdsInfo("userid") =Session("userid")
if Session("jb")=1 then
rdsInfo("lx") ="誠信會員"
end if
	rdsInfo.Update
Response.write("<script>alert(""信息添加成功！"");location.href=""index.asp"";</script>")
Response.end
	rdsInfo.Close
	conn.close
	set rdsInfo = nothing
	set conn=nothing
end sub
Function RtnReplaceInt(iCheck,iDefault) 
	If Trim(iCheck)="" Then
		RtnReplaceInt = iDefault
		Exit Function
	End If

	If IsNumeric(iCheck)=false Then
		RtnReplaceInt = iDefault
		Exit Function
	End If

	RtnReplaceInt = iCheck
End Function

%>