<%width=40
height=40
%>
<!--#include file="up.asp"--><!--#include file="fun.asp"--><!--#include file="md5.asp"-->
<style>TABLE {BORDER-TOP: 0px; BORDER-LEFT: 0px; BORDER-BOTTOM: 1px; }TD {BORDER-RIGHT: 0px; BORDER-TOP: 0px;}</style>
<br><br><%
function strLength(str)
       ON ERROR RESUME NEXT
       dim WINNT_CHINESE
       WINNT_CHINESE    = (len("論壇")=2)
       if WINNT_CHINESE then
          dim l,t,c
          dim i
          l=len(str)
          t=l
          for i=1 to l
             c=asc(mid(str,i,1))
             if c<0 then c=c+65536
             if c>255 then
                t=t+1
             end if
          next
          strLength=t
       else 
          strLength=len(str)
       end if
       if err.number<>0 then err.clear
end function
function ubbg(str)
dim re
	Set re=new RegExp
	re.IgnoreCase=true
	re.Global=True
re.Pattern="(height|javascript|jscript:|js:|value|about:|file:|document.cookie|vbscript:|vbs:|script|width|)"
str=re.Replace(str,"")

re.Pattern="(on(mouse|exit|error|click|key))"
str=re.Replace(str,"")

set re=Nothing
ubbg=str
end function
sty="<P style='MARGIN: 8px'>"
t1="<div align=center><center><table border=1 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bordercolor="&c1&" width=94% ><tr><td width=100% background=pic/"&sp&"3.gif height=25 bgcolor="&c1&">&nbsp;<img border=0 src=pic/fl.gif> <font color=#FFFFFF>"
t2="</font></td></tr>"
d1="<tr><td width=100% ><P style='MARGIN: 14px'>"
d2="</td></tr></table></center></div>"
newpwd=Replace(Request.Form("newpwd"),"'","''")
repwd=Replace(Request.Form("repwd"),"'","''")
email=Replace(Request.Form("email"),"'","''")
anhao=Replace(Request.Form("anhao"),"'","''")
sex=Replace(Request.Form("sex"),"'","''")
burn=Replace(Request.Form("burn"),"'","''")
home=Replace(Request.Form("home"),"'","''")
qq=Replace(Request.Form("qq"),"'","''")
toupic=Replace(Request.Form("toupic"),"'","''")
mypic=Replace(Request.Form("mypic"),"'","''")
mypic=ubbg(mypic)
ch=Replace(Request.Form("ch"),"'","''")
ku=Replace(Request.Form("ku"),"'","''")
gxqm=Replace(Request.Form("gxqm"),"'","''")
set canl=myconn.execute("select*from user where name='"&lgname&"' and password='"&lgpwd&"'")
if canl.eof or canl.bof then
%>
<%=t1%>錯 誤 信 息<%=t2&d1%>·你還沒有登陸或者你登陸的用戶名或密碼錯誤！·<%=d2%><%
response.end
end if
anan=canl("anhao")
if strlength(newpwd)>16 or Instr(newpwd,"=")>0 or Instr(newpwd,"%")>0 or Instr(newpwd,chr(32))>0 or Instr(newpwd,"?")>0 or Instr(newpwd,"&")>0 or Instr(newpwd,";")>0 or Instr(newpwd,",")>0 or Instr(newpwd,"'")>0 or Instr(newpwd,",")>0 or Instr(newpwd,chr(34))>0 or Instr(newpwd,chr(9))>0 or Instr(newpwd,"