<!--#include file="geditop.asp"-->
<!--#include file="foxx.asp"-->
<%dim server_v1,server_v2
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center>你提交的路径有误，禁止从站点外部提交数据!</center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%dim fqys,errc,i
fqys=request.servervariables("query_string") 
dim nothis(18) 
nothis(0)="net user" 
nothis(1)="xp_cmdshell" 
nothis(2)="/add" 
nothis(3)="exec%20master.dbo.xp_cmdshell" 
nothis(4)="net localgroup administrators" 
nothis(5)="select" 
nothis(6)="count" 
nothis(7)="asc" 
nothis(8)="char" 
nothis(9)="mid" 
nothis(10)="'" 
nothis(11)=":" 
nothis(12)="""" 
nothis(13)="insert" 
nothis(14)="delete" 
nothis(15)="drop" 
nothis(16)="truncate" 
nothis(17)="from" 
nothis(18)="%" 
errc=false 
for i= 0 to ubound(nothis) 
if instr(fqys,nothis(i))<>0 then 
errc=true 
end if 
next 
if errc then 
response.write "<script language=""javascript"">" 
response.write "parent.alert('非法操作!禁止攻击站点服务器!');" 
response.write "self.location.href='Index.Asp';" 
response.write "</script>" 
response.end 
end if 
%>
<%
dim rso,sqlo,fox,tj,keyword
fox=trim(request("fox"))
keyword=trim(request("keyword"))
if request("page")="" then
  ThisPage=1		
else
  ThisPage=request("page")
end if
%>
<title><%=title%>--<%=web%>--站内搜索列表</title>
<link href="../www.cncct.cn/fox.css" rel="stylesheet" type="text/css">
<SCRIPT language=JavaScript type=text/JavaScript>
<!--
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</SCRIPT>
<body topmargin="0">
<center>
<table cellSpacing="0" cellPadding="0" width="930" border="0" id="table92" class="index_bk" style="background-image: url('../www.cncct.cn/images/index_bg03.gif')">
	<tr vAlign="top">
		<td style="font-size: 12px">
				<div align="center">
				<table cellSpacing="0" cellPadding="0" width="930" border="0" id="table243">
					<tr>
						<td class="tdtop" align="left" width="443" height="26">
							&nbsp;<img border="0" src="images/more2.gif" width="16" height="13">&nbsp; 
<%=title%> >> 站内搜索列表
</td>
					</tr>
					<tr>
						<td class="white_td11" bgColor="#FFFFFF" valign="top">
                <table width="100%" height="30" border="0" cellpadding="0" cellspacing="0" rules="all" id="DataGrid1" class="p10t">
                  <tr style="FONT-WEIGHT: bold; BORDER-LEFT-COLOR: #2E99CC; BORDER-BOTTOM-COLOR: #2E99CC; BORDER-TOP-COLOR: #2E99CC; BACKGROUND-COLOR: #2E99CC; BORDER-RIGHT-COLOR: #2E99CC" align="middle">
                    <td style="width: 638px; background-color:#FAFAFA" align="middle" bordercolor="#fbfbfb" height="1">
                    </td>
                  </tr>
                  <tr align="middle" bgcolor="#FAFAFA" style="FONT-WEIGHT: bold; BORDER-LEFT-COLOR: #2E99CC; BORDER-BOTTOM-COLOR: #2E99CC; BORDER-TOP-COLOR: #2E99CC; BACKGROUND-COLOR: #2E99CC; BORDER-RIGHT-COLOR: #2E99CC" background="image/22.gif">
                    <td bgcolor="#FAFAFA" style="background-color:#FAFAFA">
                      <p align="left"><span class="style1">您搜索关键字为 <font color="#FF6600"><%=keyword%></font> ，结果：</span></td>
                  </tr>
			            <tr align="center" bgcolor="#FAFAFA">
            <td width="410" height="1" bgcolor="#CCCCCC"></td>
          </tr>
    <%
dim ThisPage,Pagesize,Allrecord,Allpage
set rso=server.createobject("adodb.recordset")
tj=0
Select Case fox
Case "1"
sqlo = "select * from FOX_xinxi where yz=1 and ts=0 and company like '%"&keyword&"%' order by fbsj desc"
Case "2"
sqlo = "select * from FOX_xinxi where yz=1 and ts=1 and company like '%"&keyword&"%' order by fbsj desc"
Case "3"
sqlo = "select * from FOX_dian where yz=1 and company like '%"&keyword&"%' order by fbsj desc"
Case "4"
sqlo = "select * from FOX_shop where zq=1 and company like '%"&keyword&"%' order by fbsj desc"
Case "5"
sqlo = "select * from FOX_zixun where yz=1 and company like '%"&keyword&"%' order by fbsj desc"
Case "6"
sqlo = "select * from FOX_xiao where recommend<>3 and name like '%"&keyword&"%' order by adddate desc"
End Select
rso.open sqlo,conn,1,1
rso.Pagesize=5
Pagesize=rso.Pagesize
Allrecord=rso.Recordcount
Allpage=rso.Pagecount
if ThisPage<1 then                           
ThisPage=1                           
end if
On Error Resume Next
rso.move (ThisPage-1)*Pagesize
if rso.eof then
response.write "还没有....！"
else
do while not rso.eof
response.write "<tr>"
response.write "<td style=""BACKGROUND-COLOR: #ffffff"" align=""left"" width=""410"" height=""26"" background=""images/22.gif"">   "
      Response.Write "<img height='8' src='images/arrow01.gif' width='13'> "
if fox=1 then
   Response.Write "<a href=xinxiinfo.asp?fox="&rso("id")&" target=""_self"">"&left(rso("company"),18)&"</a>"
end if   
if fox=2 then
   Response.Write "<a href=adinfo.asp?fox="&rso("id")&" target=""_self"">"&left(rso("company"),18)&"</a>"
end if
if fox=3 then
   Response.Write "<a href=mydian.asp?fox="&rso("username")&" target=""_self"">"&left(rso("company"),18)&"</a>"
end if
if fox=4 then
   Response.Write "<a href=shopinfo.asp?fox="&rso("id")&" target=""_self"">"&left(rso("company"),18)&"</a>"
end if
if fox=5 then
   Response.Write "<a href=newsinfo.asp?fox="&rso("id")&" target=""_self"">"&left(rso("company"),18)&"</a>"
end if
if fox=6 then
   Response.Write "<a href=shangjiainfo.asp?id="&rso("id")&" target=""_self"">"&left(rso("name"),18)&"</a>"
end if
response.write "</td>"

tj=tj+1
rso.movenext
if tj>=Pagesize then exit do
loop
end if
rso.close
set rso=nothing
%>
                </table>
<table border="0" cellpadding="0"  width="100%" style="border-collapse: collapse" height="20" class="p10t">
    <tr> 
    <td height="20" width="151">
    <p align="center">
    共有&nbsp;<font color="#CC5200"><%=Allrecord%></font>&nbsp;条记录</td>
    <td height="20" width="126">
    <p align="center">共 <font color="#CC5200"><%=Allpage%></font> 页</td>
    <td height="20" width="118">
    <p align="center">现在是第 
                    <font color="#CC5200"><%=ThisPage%></font> 页</td>
    <td height="20" width="256">
    <p align="center">
    <%
if ThisPage<2 then     
response.write "<font color=""#808080"">首页</font>&nbsp;"
response.write "<font color=""#808080"">上一页</font>&nbsp;"     
else     
response.write "<a href=?page=1>首页</a>&nbsp;"
response.write "<a href=?page="&ThisPage-1&">上一页</a>&nbsp;"     
end if
if Allpage-ThisPage<1 then     
response.write "<font color=""#808080"">下一页</font>&nbsp;"
response.write "<font color=""#808080"">尾页</font>&nbsp;"  
else     
response.write "<a href=?page="&(ThisPage+1)&">下一页</a>&nbsp;"   
response.write "<a href=?page="&Allpage&">尾页</a>&nbsp;"     
end if
%></td>
    </tr></table>
						</td>
					</tr>
				</table>
				</div>
		</td>
	</tr>
</table>
</center>
<!--#include file="ffbottom.asp"--></body></html>