<!--#include file="md5.asp"-->
<%
'******************************************************************************************************************
'版权: BBSGood版权所有
'网址: www.bbsgood.com
'联系: QQ:38958768,415896239    电话: 13606552007,0575-4065635
'******************************************************************************************************************

Function RequestNumSafe(qudata)
    If isNumeric(qudata) then
        if qudata="" then
            RequestNumSafe=0
        else
            RequestNumSafe=qudata
        end if
    else
        RequestNumSafe=0
        If qudata<>"" Then
            Call SaveMatter("注入安全警报","传入一个非系统定义的参数,事件发生的页面参数为"&request.servervariables("script_name")&"?"&Request.ServerVariables("QUERY_STRING")&" 请分析检查,可查看系统事件中的来源地址,帮助分析!",1)
        End IF
    end if
End Function
'----------------------------------------------------
Function RequestCStringSafe(cstring)
    If Instr(1,cstring,"%")>0 or Instr(1,cstring,"=")>0 or Instr(1,cstring,"&")>0 or Instr(1,cstring,"#")>0 or Instr(1,cstring,">")>0 or Instr(1,cstring,"<")>0 or Instr(1,cstring,"'")>0 or Instr(1,cstring,";")>0 or Instr(1,cstring," ")>0 or Instr(1,cstring,"`")>0 then
        RequestCStringSafe=""
        Call SaveMatter("注入安全警报","传入一个非系统定义的参数,事件发生的页面参数为"&request.servervariables("script_name")&"?"&Request.ServerVariables("QUERY_STRING")&" 请分析检查,可查看系统事件中的来源地址,帮助分析!",1)
    else
        RequestCStringSafe=cstring
    end if
End Function
'----------------------------------------------------
Function Boardinfo(BoardID)  '读取版面信息函数
    Dim rsboard,rsboard2,sqlboard
    If vartype(Application(bbsinfo&"Boardinfo"&BoardID))=0 then
        sqlboard="select top 1 BoardID,FBoardID,BoardName,BoardJS,BoardZT,CreateHtml,BoardLastPost,BoardAdmin,TitleNum,ReTitleNum,BoardCreateTime,RzUser,OrderID,ViewType,BoardImage,SortType,ColSortNum,NoSeeBoard,PostType,CloseUpLoad,Board_Url,Board_MB_is,pagetop,listtype,pagelist,postmb1,postmb2,postmb3,pagetom,ispostdel,postmoney,repostmoney,board_userdj,board_title,board_keywords,board_description,post_title,post_keywords,post_description from LxTel_Board where BoardID="&BoardID&""
        Set rsboard = Server.CreateObject("ADODB.Recordset")
        if not IsObject(conn) then
            LinkData
        end if
        rsboard.open sqlboard,conn,1,1
        datanum=datanum+1
        if rsboard.BOF and rsboard.EOF then
            Response.Write "没有找到这个版面"
            Response.End
        else
            Application.Lock
            Application(bbsinfo&"Boardinfo"&BoardID)=rsboard.GetRows(-1)
            Application.UnLock
        end if
        rsboard.Close
        set rsboard=nothing
    end if
    
    If vartype(Application(bbsinfo&"FBoardCHK"&BoardID))=0 then '检测是否为父分类
        sqlboard="select top 1 BoardID,FBoardID from LxTel_Board where FBoardID="&BoardID&""
        Set rsboard2 = Server.CreateObject("ADODB.Recordset")
        if not IsObject(conn) then
            LinkData
        end if
        rsboard2.open sqlboard,conn,1,1
        datanum=datanum+1
        if rsboard2.BOF and rsboard2.EOF then
            Application.Lock
            Application(bbsinfo&"FBoardCHK"&BoardID)=false
            Application.UnLock
        else
            Application.Lock
            Application(bbsinfo&"FBoardCHK"&BoardID)=true
            Application.UnLock
        end if
        rsboard2.Close
        set rsboard2=nothing
    end if    
    Boardinfo=Application(bbsinfo&"Boardinfo"&BoardID)
End Function
'----------------------------------------------------
Function sysinfo()  '读取系统信息函数
    If vartype(Application(BBSInfo&"sysinfo"))=0 then
        dim rssys
        sql="select top 1 * from LxTel_sys"
        Set rssys = Server.CreateObject("ADODB.Recordset")
        if not IsObject(conn) then
第84行            LinkData
        end if
        rssys.open sql,conn,1,1
        datanum=datanum+1
        Application.Lock
        Application(BBSInfo&"sysinfo")=rssys.GetRows(-1)
        Application.UnLock
        rssys.Close
        set rssys=nothing
    end if
End Function