<%@ LANGUAGE=VBScript.Encode%>
<% 
Response.Expires=0
cwjh_id=Session("cwjh_id")
cwjh_name=Session("cwjh_name")
cwjh_grade=Session("cwjh_grade")
cwjh_jhdj=Session("cwjh_jhdj")
chatbgcolor=Application("cwjh_chatbgcolor")
chatimage=Application("cwjh_chatimage")
if chatbgcolor="" then chatbgcolor="008888"
id=LCase(trim(request.querystring("id")))
songid=request.querystring("name")
toname=request.querystring("toname")
if InStr(id,"or")<>0 or InStr(id,"'")<>0 or InStr(id,"`")<>0 or InStr(id,"=")<>0 or InStr(id,"-")<>0 or InStr(id,",")<>0 then 
	Response.Write "<script language=JavaScript>{alert('滚吧，你想做什么？想捣乱吗？！');}</script>"
	Response.End 
end if
if toname<>cwjh_name and toname<>"大家" then
	Response.Write "<script language=JavaScript>{alert('你想作什么，人家并没有点歌给你！');close();}</script>"
	Response.End
end if
Set connt=Server.CreateObject("ADODB.CONNECTION")
connt.open Application("cwjh_usermdb")
sql="select * from 音乐swf where id="&songid
Set Rs=connt.Execute(sql)
%>
<html>
<head>
<title>MTV 欣赏</title>
<meta http-equiv='content-type' content='text/html; charset=gb2312'>
<link rel="stylesheet" href="../readonly/style.css">
</head>
<body oncontextmenu=self.event.returnValue=false bgcolor="<%=chatbgcolor%>" background="../<%=chatimage%>" bgproperties="fixed" text="#FFFFFF">
<center>
<h4><b>您的好友 <font color=yellow><%=id%></font> 给您点播的歌曲：<%=rs("歌名")%></b></h2>
<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0" width="400" height="300"><param name=movie value="<%=rs("路径")%>"><param name=quality value=high><embed src="<%=rs("路径")%>" quality=high pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash" type="application/x-shockwave-flash" width="1" height="1"></embed></object>
</html>