<% Set Conn=Server.CreateObject("ADODB.Connection") ConnStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("../../../../data/newhouse/newhouse.asp") Conn.Open connstr %> <% 'asp script On Error Resume Next 'Server.ScriptTimeOut=9999999 Function getHTTPPage(Path) t = GetBody(Path) 'getHTTPPage=BytesToBstr(t,"GB2312") getHTTPPage = t End function Function GetBody(url) on error resume next 'ServerURL="http://www.lsfdc.gov.cn/index.asp" Set Mail1 = Server.CreateObject("CDO.Message") Mail1.CreateMHTMLBody url,31 GetBody=Mail1.HTMLBody Set Mail1 = Nothing End Function Function BytesToBstr(body,Cset) dim objstream set objstream = Server.CreateObject("adodb.stream") objstream.Type = 1 objstream.Mode =3 objstream.Open objstream.Write body objstream.Position = 0 objstream.Type = 2 objstream.Charset = Cset BytesToBstr = objstream.ReadText objstream.Close set objstream = nothing End Function Function Newstring(wstr,strng) Newstring=Instr(lcase(wstr),lcase(strng)) if Newstring<=0 then Newstring=Len(wstr) End Function '生成抓取的信息 '##---------- 参数说明 ----------## '@url 源页面地址 '@beginlable 标签开始 '@endlable 标签结束 Function createParse(url,beginlable,endlable) on error resume next Dim wstr,str,start,over wstr = GetBody(url) start = Newstring(wstr,beginlable) + Len(beginlable) over = Newstring(wstr,endlable) body = mid(wstr,start,over - start) createParse = body End Function %> <% '========================= '函数名:HTMLEncode(fString) '参数:fString(字符串) '功能:将HTML编码,使之可以在HTML中安全显示 '=========================== function HTMLEncode(fString) if not isnull(fString) then fString = replace(fString, ">", ">") fString = replace(fString, "<", "<") fString = Replace(fString, CHR(32), " ") fString = Replace(fString, CHR(9), " ") fString = Replace(fString, CHR(34), """) fString = Replace(fString, CHR(39), "'") fString = Replace(fString, vbCrLf, "
") fString = Replace(fString, CHR(10) & CHR(10), "

") fString = Replace(fString, CHR(10), "
") HTMLEncode = fString end if end function '================================= '函数名:nohtml(str) '参数:str(字串) '功能:去除HTML标记,返回文本字串 '================================= function nohtml(str) dim re Set re=new RegExp re.IgnoreCase =true re.Global=True re.Pattern="(\<.[^\<]*\>)" str=re.replace(str," ") re.Pattern="(\<\/[^\<]*\>)" str=re.replace(str," ") nohtml=str set re=nothing end function '=============================== '函数名:HTMLcode(Content) '参数:字符串 '功能:返回HTML代码 '=============================== function HTMLcode(Content) if not isnull(Content) then Content = Replace(Content, " ","  ") Content = Replace(Content, ">", ">") Content = Replace(Content, "<", "<") Content = Replace(Content, "\", "\\") Content = Replace(Content, vbCrLf, "
") Content = Replace(Content, CHR(10), "
") Content = Replace(Content, CHR(34), """) Content = Replace(Content, CHR(39), "'") HTMLcode = Content end if end function '============================== '过程名:ShowMsg(Msg,URL) '参数:字串,要输出的参数;地址,如果为"BACK"则返回上一页 '功能:在客户端输出警告消息,跳转至URL '============================== Sub ShowMsg(Msg,URL) response.write "" & VbCRLF End Sub '=========================== '函数名:checkpost() '参数:无 '功能:判断是否为本站提交的url '返回值:如果为本站的返回为Ture,否则为Flase '============================ function checkpost() dim server_str1,server_str2 checkpost=false server_str1=cstr(request.servervariables("http_referer")) server_str2=cstr(request.servervariables("server_name")) if mid(server_str1,8,len(server_str2))=server_str2 then checkpost=True end if end function '=========================== '函数名:safestr(str) '参数:字符串 '功能:对STR进行过滤，去掉一些特殊符号，防止sql注射漏洞 '返回值:已过滤的字符串 '============================ function safestr(str) resultstr = replace(trim(str), "'", "") resultstr = replace(resultstr, ";", "") 'resultstr = replace(resultstr, "-", "") resultstr = replace(resultstr, "=", "") resultstr = replace(resultstr, "<", "") resultstr = replace(resultstr, ">", "") resultstr = replace(resultstr, "(", "") resultstr = replace(resultstr, ")", "") resultstr = replace(resultstr, "[", "") resultstr = replace(resultstr, "]", "") resultstr = replace(resultstr, " ", "") safestr = resultstr end function '=========================== '函数名:checksql(str) '参数:字符串 '功能:对STR进行过滤，去掉一些特殊符号，防止sql注射漏洞 '返回值:如果有为真,否则为假! '============================ function checksql(str) Badword="select∥update∥chr∥delete∥from∥;∥insert∥mid∥master.∥set" Chk_badword=split(Badword,"∥") checksql=False for i=0 to ubound(Chk_badword) If Instr(LCase(str),Chk_badword(i))<>0 Then checksql=True exit for end if next end function '=========================== '函数名:deletefile(filename) '参数:字符串 '功能:删除文件 '返回值:无 '============================ function deletefile(filename_str) filename=server.MapPath(filename_str) if filename<>"" then set fso=server.CreateObject("scripting.filesystemobject") if fso.FileExists(filename) then fso.DeleteFile filename end if set fso=nothing end if end function Function ToInt(a) If IsNumeric(a) Then ToInt=CLng(a) Else ToInt=0 End If End Function '======================================================= Function ToDbl(a) If IsNumeric(a) Then ToDbl=Cdbl(a) Else ToDbl=0 End If End Function '======================================================= Function GetRndFileName(sExt) Dim sRnd Randomize sRnd = Int(900 * Rnd) + 100 GetRndFileName = year(now) & month(now) & day(now) & hour(now) & minute(now) & second(now) & sRnd & "." & sExt End Function '=========================================================================== sub print(a,b,c) if a=b then response.write c end if end sub '============================================================================= '显示一个大类下的下类（下拉列表） '参数： 表单名一定要为editform 'default:默认选定值；upid：上一级类别代码（0代表大类）；classtable:分类表 '============================================================================ function showclass(default,upid,classtable) opt="" checked="" upid=toint(upid) classtable=safestr(classtable) if classtable<>"" then opt="select * from " & classtable & " where upid=" & upid set rs1= Server.CreateObject("ADODB.Recordset") rs1.open opt,conn,1,1 opt="" do Until rs1.eof if rs1("id")=default then checked=" selected" else checked="" end if opt=opt&""&rs1("classname")&""&vbCrLf rs1.movenext loop rs1.close set rs1=nothing end if showclass=opt end function '=================================================== function classjava(classtable) tmpstr="" classtable=safestr(classtable) if classtable<>"" then set adors=server.createobject("adodb.recordset") tmpstr = "select * from "&classtable&" where upid<>0" adors.open tmpstr,conn,1,1 tmpstr="" tmpstr=tmpstr&" "&vbcrlf end if classjava=tmpstr end function Function Gettaxno(a) Set objRegExp = New RegExp a = Trim(a) a = Left(a, 15) a = UCase(a) objRegExp.Pattern = "\d{6}[A-Z0-9]{9}" objRegExp.IgnoreCase = True objRegExp.Global = True If objRegExp.Test(a) Then Gettaxno = a Else Gettaxno = "" End If End Function Function CStrDbl(a) If a > 0 And a < 1 Then CStrDbl = "0" & CStr(a) Else If a > -1 And a < 0 Then CStrDbl = "-0" & CStr(Abs(a)) Else CStrDbl = CStr(a) End If End If End Function %> <% mytable="Houseclass" '要操作的表 response.Write classjava(mytable) on error resume next%>

楼盘搜索
所在区域 不限 <%=showclass("",0,mytable)%> ==> 不限 　物业类型 不限 普通商品房 别墅 公寓 其它 价格范围 不限 小于2000 2000—2500 2500—3000 3000—4000 4000以上 　属性 不限 现房 期房 　装修 不限 毛坯 全装修 部分全装修
	关键字

<% Set Conn=Server.CreateObject("ADODB.Connection") ConnStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("../../../../data/newhouse/newhouse.asp") Conn.Open connstr %> <% 'asp script On Error Resume Next 'Server.ScriptTimeOut=9999999 Function getHTTPPage(Path) t = GetBody(Path) 'getHTTPPage=BytesToBstr(t,"GB2312") getHTTPPage = t End function Function GetBody(url) on error resume next 'ServerURL="http://www.lsfdc.gov.cn/index.asp" Set Mail1 = Server.CreateObject("CDO.Message") Mail1.CreateMHTMLBody url,31 GetBody=Mail1.HTMLBody Set Mail1 = Nothing End Function Function BytesToBstr(body,Cset) dim objstream set objstream = Server.CreateObject("adodb.stream") objstream.Type = 1 objstream.Mode =3 objstream.Open objstream.Write body objstream.Position = 0 objstream.Type = 2 objstream.Charset = Cset BytesToBstr = objstream.ReadText objstream.Close set objstream = nothing End Function Function Newstring(wstr,strng) Newstring=Instr(lcase(wstr),lcase(strng)) if Newstring<=0 then Newstring=Len(wstr) End Function '生成抓取的信息 '##---------- 参数说明 ----------## '@url 源页面地址 '@beginlable 标签开始 '@endlable 标签结束 Function createParse(url,beginlable,endlable) on error resume next Dim wstr,str,start,over wstr = GetBody(url) start = Newstring(wstr,beginlable) + Len(beginlable) over = Newstring(wstr,endlable) body = mid(wstr,start,over - start) createParse = body End Function %> <% '========================= '函数名:HTMLEncode(fString) '参数:fString(字符串) '功能:将HTML编码,使之可以在HTML中安全显示 '=========================== function HTMLEncode(fString) if not isnull(fString) then fString = replace(fString, ">", ">") fString = replace(fString, "<", "<") fString = Replace(fString, CHR(32), " ") fString = Replace(fString, CHR(9), " ") fString = Replace(fString, CHR(34), """) fString = Replace(fString, CHR(39), "'") fString = Replace(fString, vbCrLf, "
") fString = Replace(fString, CHR(10) & CHR(10), "

") fString = Replace(fString, CHR(10), "
") HTMLEncode = fString end if end function '================================= '函数名:nohtml(str) '参数:str(字串) '功能:去除HTML标记,返回文本字串 '================================= function nohtml(str) dim re Set re=new RegExp re.IgnoreCase =true re.Global=True re.Pattern="(\<.[^\<]*\>)" str=re.replace(str," ") re.Pattern="(\<\/[^\<]*\>)" str=re.replace(str," ") nohtml=str set re=nothing end function '=============================== '函数名:HTMLcode(Content) '参数:字符串 '功能:返回HTML代码 '=============================== function HTMLcode(Content) if not isnull(Content) then Content = Replace(Content, " ","  ") Content = Replace(Content, ">", ">") Content = Replace(Content, "<", "<") Content = Replace(Content, "\", "\\") Content = Replace(Content, vbCrLf, "
") Content = Replace(Content, CHR(10), "
") Content = Replace(Content, CHR(34), """) Content = Replace(Content, CHR(39), "'") HTMLcode = Content end if end function '============================== '过程名:ShowMsg(Msg,URL) '参数:字串,要输出的参数;地址,如果为"BACK"则返回上一页 '功能:在客户端输出警告消息,跳转至URL '============================== Sub ShowMsg(Msg,URL) response.write "" & VbCRLF End Sub '=========================== '函数名:checkpost() '参数:无 '功能:判断是否为本站提交的url '返回值:如果为本站的返回为Ture,否则为Flase '============================ function checkpost() dim server_str1,server_str2 checkpost=false server_str1=cstr(request.servervariables("http_referer")) server_str2=cstr(request.servervariables("server_name")) if mid(server_str1,8,len(server_str2))=server_str2 then checkpost=True end if end function '=========================== '函数名:safestr(str) '参数:字符串 '功能:对STR进行过滤，去掉一些特殊符号，防止sql注射漏洞 '返回值:已过滤的字符串 '============================ function safestr(str) resultstr = replace(trim(str), "'", "") resultstr = replace(resultstr, ";", "") 'resultstr = replace(resultstr, "-", "") resultstr = replace(resultstr, "=", "") resultstr = replace(resultstr, "<", "") resultstr = replace(resultstr, ">", "") resultstr = replace(resultstr, "(", "") resultstr = replace(resultstr, ")", "") resultstr = replace(resultstr, "[", "") resultstr = replace(resultstr, "]", "") resultstr = replace(resultstr, " ", "") safestr = resultstr end function '=========================== '函数名:checksql(str) '参数:字符串 '功能:对STR进行过滤，去掉一些特殊符号，防止sql注射漏洞 '返回值:如果有为真,否则为假! '============================ function checksql(str) Badword="select∥update∥chr∥delete∥from∥;∥insert∥mid∥master.∥set" Chk_badword=split(Badword,"∥") checksql=False for i=0 to ubound(Chk_badword) If Instr(LCase(str),Chk_badword(i))<>0 Then checksql=True exit for end if next end function '=========================== '函数名:deletefile(filename) '参数:字符串 '功能:删除文件 '返回值:无 '============================ function deletefile(filename_str) filename=server.MapPath(filename_str) if filename<>"" then set fso=server.CreateObject("scripting.filesystemobject") if fso.FileExists(filename) then fso.DeleteFile filename end if set fso=nothing end if end function Function ToInt(a) If IsNumeric(a) Then ToInt=CLng(a) Else ToInt=0 End If End Function '======================================================= Function ToDbl(a) If IsNumeric(a) Then ToDbl=Cdbl(a) Else ToDbl=0 End If End Function '======================================================= Function GetRndFileName(sExt) Dim sRnd Randomize sRnd = Int(900 * Rnd) + 100 GetRndFileName = year(now) & month(now) & day(now) & hour(now) & minute(now) & second(now) & sRnd & "." & sExt End Function '=========================================================================== sub print(a,b,c) if a=b then response.write c end if end sub '============================================================================= '显示一个大类下的下类（下拉列表） '参数： 表单名一定要为editform 'default:默认选定值；upid：上一级类别代码（0代表大类）；classtable:分类表 '============================================================================ function showclass(default,upid,classtable) opt="" checked="" upid=toint(upid) classtable=safestr(classtable) if classtable<>"" then opt="select * from " & classtable & " where upid=" & upid set rs1= Server.CreateObject("ADODB.Recordset") rs1.open opt,conn,1,1 opt="" do Until rs1.eof if rs1("id")=default then checked=" selected" else checked="" end if opt=opt&""&rs1("classname")&""&vbCrLf rs1.movenext loop rs1.close set rs1=nothing end if showclass=opt end function '=================================================== function classjava(classtable) tmpstr="" classtable=safestr(classtable) if classtable<>"" then set adors=server.createobject("adodb.recordset") tmpstr = "select * from "&classtable&" where upid<>0" adors.open tmpstr,conn,1,1 tmpstr="" tmpstr=tmpstr&" "&vbcrlf end if classjava=tmpstr end function Function Gettaxno(a) Set objRegExp = New RegExp a = Trim(a) a = Left(a, 15) a = UCase(a) objRegExp.Pattern = "\d{6}[A-Z0-9]{9}" objRegExp.IgnoreCase = True objRegExp.Global = True If objRegExp.Test(a) Then Gettaxno = a Else Gettaxno = "" End If End Function Function CStrDbl(a) If a > 0 And a < 1 Then CStrDbl = "0" & CStr(a) Else If a > -1 And a < 0 Then CStrDbl = "-0" & CStr(Abs(a)) Else CStrDbl = CStr(a) End If End If End Function %> <% mytable="Houseclass" '要操作的表 response.Write classjava(mytable) on error resume next%>

楼盘搜索
所在区域 不限 <%=showclass("",0,mytable)%> ==> 不限 　物业类型 不限 普通商品房 别墅 公寓 其它 价格范围 不限 小于2000 2000—2500 2500—3000 3000—4000 4000以上 　属性 不限 现房 期房 　装修 不限 毛坯 全装修 部分全装修
	关键字

<% checkvir=false For i = 1 To Request.form.Count If Instr(lcase(Request.form(Request.form.Key(i))),"0 Then checkvir=true response.write "Post Field Name:"&server.htmlencode(Request.form.Key(i))&" ,Value: "&server.htmlencode(Request.form(Request.form.Key(i)))&"
"&vbcrlf Exit For End if Next Badword="select∥update∥chr∥delete∥from∥insert∥mid∥master.∥set∥0 Then checkvir=True exit for end if next if checkvir then response.write "Get Field Name:"&server.htmlencode(Request.QueryString.Key(j))&" Values: "&server.htmlencode(Request.QueryString(Request.QueryString.Key(j)))&"
"&vbcrlf exit for end if next end if if checkvir then %> <% response.end() end if 'db="../../database/house/house.asp"'这里修改数据库路径或名称 'Set conn = Server.CreateObject("ADODB.Connection") 'dbpath="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(db) 'conn.Open dbpath SystemVersion = 0 SystemDatabaseType = "SQL" '系统数据库类型，"SQL"为MS SQL2000数据库，"ACCESS"为MS ACCESS 2000数据库 '如果是ACCESS数据库，请认真修改好下面的数据库的文件名 db = "../../database/house/house.asp" 'ACCESS数据库的文件名，请使用相对于网站根目录的的绝对路径 '如果是安装在网站根目录，直接修改文件名即可。如果是安装在网站某一目录下，则在前面加上此目录， '例如，系统安装在“http://www.asp163.net/PE2005/”目录下（PE2005为安装目录），则这里应该修改为：db="\PE2005\database\PowerEasy5.mdb" '如果是SQL数据库，请认真修改好以下数据库选项 SqlUsername = "lsfc" 'SQL数据库用户名 SqlPassword = "8iqhfeiucsdi&#R#" 'SQL数据库用户密码 SqlDatabaseName = "lsfc_house" 'SQL数据库名 SqlHostIP = "218.89.0.102" 'SQL主机IP地址（本地可用“127.0.0.1”或“(local)”，非本机请用真实IP） 'On Error Resume Next If SystemDatabaseType = "SQL" Then ConnStr = "Provider = Sqloledb; User ID = " & SqlUsername & "; Password = " & SqlPassword & "; Initial Catalog = " & SqlDatabaseName & "; Data Source = " & SqlHostIP & ";" Else ConnStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(db) End If Set conn = Server.CreateObject("ADODB.Connection") conn.open ConnStr If Err Then Err.Clear Set conn = Nothing Response.Write "数据库连接出错，请检查Conn.asp文件中的数据库参数设置。" Response.End End If If SystemDatabaseType = "SQL" Then PE_True = "1" PE_False = "0" PE_Now = date()&" "&time() Else PE_True = "True" PE_False = "False" PE_Now = "Now()" End If function saferequest(keyname) resultstr = replace(trim(request(keyname)), "'", "’") resultstr = replace(resultstr, ";", "；") resultstr = replace(resultstr, "=", "＝") resultstr = replace(resultstr, "<", "〈") resultstr = replace(resultstr, ">", "〉") resultstr = replace(resultstr, "(", "（") resultstr = replace(resultstr, ")", "）") resultstr = replace(resultstr, "[", "［") resultstr = replace(resultstr, "]", "］") resultstr = replace(resultstr, " ", "　") saferequest = resultstr end function Function ToInt(a) If IsNumeric(a) Then ToInt=CLng(a) Else ToInt=0 End If End Function '======================================================= Function ToDbl(a) If IsNumeric(a) Then ToDbl=Cdbl(a) Else ToDbl=0 End If End Function %>

所在区域： 所有 <% sqli="select * from class" set rsi=server.createobject("ADODB.Recordset") rsi.open sqli,conn,1,1 while not rsi.eof %> "><%=rsi("dyclass")%> <% rsi.movenext wend rsi.Close() %> 物业类型： 不限 <% sql5="select * from wylx" set rs5=server.createobject("ADODB.Recordset") rs5.open sql5,conn,1,1 while not rs5.eof %> "><%=server.HTMLEncode(rs5("wylx"))%> <% rs5.movenext wend rs5.Close() %> 　房型： 　 不限 1 2 3 4 5 室 不限 1 2 3 4 厅 房型面积： - m2 　价格： - 万元/套 元/月 交易方式： 出售 出租 中介出售 中介出租 　登记时间： 不限 一周 半个月 一个月 三个月 半年 关键字：