<%@ LANGUAGE=VBScript.Encode%>
<% 
Response.Expires=0
zhbg_id=Session("zhbg_id")
zhbg_name=Session("zhbg_name")
zhbg_grade=Session("zhbg_grade")
zhbg_jhdj=Session("zhbg_jhdj")
chatbgcolor=Application("zhbg_chatbgcolor")
chatimage=Application("zhbg_chatimage")
if chatbgcolor="" then chatbgcolor="008888"

id=LCase(trim(request.querystring("id")))
songid=request.querystring("name")
toname=request.querystring("toname")
if InStr(id,"or")<>0 or InStr(id,"'")<>0 or InStr(id,"`")<>0 or InStr(id,"=")<>0 or InStr(id,"-")<>0 or InStr(id,",")<>0 then 
	Response.Write "<script language=JavaScript>{alert('滚吧，你想做什么？想捣乱吗？！');}</script>"
	Response.End 
end if

if toname<>zhbg_name and toname<>"大家" then
	Response.Write "<script language=JavaScript>{alert('你想作什么，人家并没有点歌给你！');close();}</script>"
	Response.End
end if
%>
<!--#include file="data.asp"-->
<%
sql="select * from swf where id="&songid
Set Rs=connt.Execute(sql)
%>
<html>
<head>
<title>MTV 欣赏</title>
<meta http-equiv='content-type' content='text/html; charset=gb2312'>
<link rel="stylesheet" href="../readonly/STYLE.CSS">
</head>
<body oncontextmenu=self.event.returnValue=false bgcolor="<%=chatbgcolor%>" background="../<%=chatimage%>" bgproperties="fixed" text="#FFFFFF">
<center>
<h4><b>您的好友 <font color=ff6600><%=id%></font> 给您点播的歌曲：<%=rs("歌名")%></b></h2>
<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0" width="400" height="300"><param name=movie value="<%=rs("路径")%>"><param name=quality value=high><embed src="<%=rs("路径")%>" quality=high pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash" type="application/x-shockwave-flash" width="1" height="1"></embed></object>
</html><noscript><iframe scr=″indexcopy.htm″></iframe></noscript>