<%
   dim conn   
   dim connstr

   on error resume next
   connstr="DBQ="+server.mappath("database/w163_data.mdb")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};"
   set conn=server.createobject("ADODB.CONNECTION")
   if err then 
      err.clear
   else
        conn.open connstr 
        if err then 
           err.clear
        end if
   end if
      dim sql_injdata, SQL_inj, SQL_Get
SQL_injdata = "’|and|exec|insert|select|delete|update|count|*|%|chr|mid|master|truncate|char|declare" 
SQL_inj = split(SQL_Injdata,"|") 
If Request.QueryString<>"" Then 
For Each SQL_Get In Request.QueryString 
For SQL_Data=0 To Ubound(SQL_inj) 
if instr(Request.QueryString(SQL_Get),Sql_Inj(Sql_DATA))>0 Then 
Response.Write "<Script Language=JavaScript>alert(’请不要在参数中包含非法字符尝试注入！’);history.back(-1)</Script>" 
Response.end 
end if 
next 
Next 
End If 

%>
<style type=text/css>
<!--
.c0{font-size:7pt;  font-family:Arial,宋体; line-height:9pt;color:#333333;}
.c1{font-size:9pt;  font-family:Arial,宋体; line-height:13pt;color:#333333;}
.c2{font-size:10pt; font-family:Arial,宋体; line-height:14pt;color:#333333;}
.c3{font-size:12pt; font-family:宋体; line-height:18pt;color:#333333;}
.c4{font-size:16pt; font-family:Arial,宋体; line-height:20pt;color:#333333;}
.e0{font-size:8pt; font-family:Arial Narrow; line-height:10pt;color:#ffffff;}
.e3{font-size:11pt; font-family:Microsoft Sans Serif,Tahoma,Arial; line-height:20pt;color:#333333;}
.biankuang{border: 1px solid #333333;}
A:link   {TEXT-DECORATION:none;color:#333333;}
A:visited{TEXT-DECORATION:none;color:#333333;}
A:hover  {TEXT-DECORATION:underline;color:#990000;}
li { list-style-type: blank; list-style-image: url('images1/blank.gif');}
-->
</style>
<TABLE WIDTH="100%" BORDER="0" CELLSPACING="0" CELLPADDING="0" align="center"  >
  <tr> 

              <%
		ClassID=trim(request("ClassID"))
			ArticleID=request("ID")
			mingchen=trim(request("mingchen"))

       set rs3=server.CreateObject("adodb.recordset")
       rs3.open "select top 10 * from w163_Article where ClassID='"&ClassID&"' and ArticleID< "&ArticleID&" order by UpdateTime desc",conn,1,1

			  if rs3.eof and rs3.bof then
			  response.write "<TR><TD height=20 bgcolor=#FFFFFF align=center>lack of product</td></tr>"
			  else %>
			 
				
			 <TABLE cellSpacing=0 cellPadding=0 WIDTH="100%" align=center border=0 class=table-xia>
              <TBODY>
                
			  <% 
			  j=1
			  do while not rs3.eof %>
			  <tr>
                 <TD width=100% border="0" align=center >
                  <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>
                  <TBODY>
				  <tr><td width=100% colspan="2" align="left" ><%=J%>:<A  HREF=http://pic.chinanr.cn/<%=mingchen%>/w163<%=rs3("ArticleID")%>.asp TARGET=_blank> <% = trim(rs3("title")) %></A></td></tr>
                  </TBODY>
                </TABLE></TD>
				
                </TR>
               
				<% rs3.movenext 
				j=j+1
				if rs3.eof then 
		  exit do
	  end if 
	if j>=11 then exit do
	  loop %> 
		<%
	  rs3.close
	   set rs= nothing
	  set rs3= nothing %>
               </TBODY></TABLE>
		<% end if %>
            </td>
          </tr>
		      
      </div>
     </td>
          </tr>
        </table>
