|
|
|
|
|
|
|
<%
function checkSQL(inputStr)
checkSQL = Replace(trim(inputStr), "'", "''")
end function
set conn=server.CreateObject ("adodb.connection")
conn.ConnectionString =application(application("connName"))
conn.CursorLocation =3
conn.open
newsid=checksql(request("newsid"))
set rs=conn.Execute ("select newsid,title,news,datetime,news from news where iseff='Y' and cstr(newsid)='"& newsid &"'")
if rs.EOF then
rs.close
conn.close
alertgolast "找不到資料"
end if
%>
|
|
|
|
|
|
|
|
|
|
|