读书人

新手问下怎么修改以下分页程序,过滤非

发布时间: 2012-02-06 15:52:44 作者: rapoo

新手问下如何修改以下分页程序,过滤非法字符呢?
<%
page=cint(request( "page "))

Set rs=Server.CreateObject( "ADODB.RecordSet ")
sql= "select * from company order by compno "
rs.Open sql,conndb,1,1
if rs.eof and rs.bof then
response.Write( "没有记录 ")
else
rs.PageSize=15
if page=0 then page=1
pages=rs.pagecount
if page > pages then page=pages
rs.AbsolutePage=page

for n=1 to rs.PageSize
%>
<tr height= "40 " align= "center " bgcolor= "#FFFFFF " onMouseOver= "this.bgColor= '#cccccc '; " onMouseOut= "this.bgColor= '#FFFFFF '; ">
<td > <%=rs( "compno ")%> </td>
<td > <%=rs( "compname ")%> </td>
<td > <%=rs( "province ")%> </td>
<td > <%=rs( "city ")%> </td>
<td > <%=rs( "phone ")%> </td>
<td > <%=rs( "fax ")%> </td>
<td > <%=rs( "address ")%> </td>
<td > <%=rs( "manager ")%> </td>
<td width= "36 " > <a href= "companymod.asp?compno= <%=rs( "compno ")%> "> <font color=red> 修改 </font> </a> </td>
<td width= "28 " > <a href= "javascript:deleteMe( ' <%=rs( "compno ")%> ') "> <font color=red> 删除 </font> </a> </td>
</tr>

<%
rs.movenext
if rs.eof then exit for
next
%>
</table>

<table width= "774 " border= "0 " align= "center " cellpadding= "0 " cellspacing= "0 ">
<tr>
<td>   </td>
</tr>
<tr bgcolor= "#FFFFFF ">
<form method=Post action= "course.asp ">
<td height= "30 " align= "right ">
<%if Page <2 then
response.write "首  页| 上一页  "
else
response.write " <a href=company.asp?page=1> 首  页 </a> "
response.write "| <a href=company.asp?page= " & Page-1 & "> 上一页 </a>   "
end if
if rs.pagecount-page <1 then
response.write "|下一页 尾  页 "
else


response.write "| <a href=company.asp?page= " & (page+1) & "> "
response.write "下一页 </a> | <a href=company.asp?page= "&rs.pagecount& "> 尾  页 </a> "
end if
response.write " |页次: <strong> <font color=red> "&Page& " </font> / "&rs.pagecount& " </strong> 页 "
response.write " 共 <b> <font color= '#FF0000 '> "&rs.recordcount& " </font> </b> 条记录 <b> "&rs.pagesize& " </b> 条记录/页 "


response.write " 转到: <input type= 'text ' name= 'page ' size=4 maxlength=10 class=input value= "&page& "> "
response.write " <input class=input type= 'submit ' value= ' 跳转 ' name= 'cndok '> </span> </p> "
%>
</td> </form>
</tr>
</table>
<%
end if
rs.close
set rs=nothing
%>

就是在http://localhost/****/course.asp?page=2

若在后面加个 ',就是提示类型转换错误..
怎么过滤这些信息呢?

[解决办法]
page=request( "page ")
if not isnumeric(page) then page = 1 else page = clng(page)

读书人网 >ASP

热点推荐