兄弟们看一下这个代码有什么问题
<%
backurl=request.ServerVariables("HTTP_REFERER")
IP = REQUEST.servervariables("REMOTE_ADDR")
if instr(backurl,"user_userorder.asp")>0 or instr(backurl,"user_myzp.asp")>0 or instr(backurl,"user_guest.asp")>0 or instr(backurl,"user_zhaopin.asp")>0 then
action= request("action")
else
action= request.form("action")
end if
select case action
'################################用户添加开始########################
case "adduser"
username=htmlencode(request.form("username"))
password=md5(request.form("password"))
uname=htmlencode(request.form("uname"))
if isnumeric(request.form("usertype")) then
usertype=int(request.form("usertype"))
else
usertype=0
end if
if isnumeric(request.form("shenfen")) then
shenfen=int(request.form("shenfen"))
else
shenfen=0
end if
if isnumeric(request.form("cityid")) then
cityid=int(request.form("cityid"))
else
cityid=0
end if
address=htmlencode(request.form("address"))
postcode=htmlencode(request.form("postcode"))
tel=htmlencode(request.form("tel"))
fax=htmlencode(request.form("fax"))
email=htmlencode(request.form("email"))
homepage=htmlencode(request.form("homepage"))
if isnumeric(request.form("cslx")) then
cslx=int(request.form("cslx"))
else
cslx=0
end if
if isnumeric(request.form("qylx")) then
qylx=int(request.form("qylx"))
else
qylx=0
end if
remark=htmlencode(request.form("remark"))
photo=htmlencode(request.form("photo"))
qiuzhi=htmlencode(request.form("qiuzhi"))
xueli=htmlencode(request.form("xueli"))
if isnumeric(request.form("shixiao")) then
sx=int(request.form("shixiao"))
else
sx=0
end if
shixiao=DateAdd("d",sx,Date())
sex=htmlencode(request.form("sex"))
if usertype=1 then
xzrq=DateAdd("d",100,Date())
elseif usertype=2 then
xzrq=DateAdd("d",15,Date())
elseif usertype=3 then
xzrq=DateAdd("d",15,Date())
else
xzrq=DateAdd("d",1,Date())
end if
if isnumeric(request.form("nl")) then
nl=int(request.form("nl"))
else
nl=0
end if
if request.form("rc")<>"" then
rc="true"
else
rc="false"
end if
if username<>"" and request.form("password")<>"" and uname<>"" then
function checkuser(username,uname)
set rs=conn.execute("select id from [用户] where 登录名='"&username&"' or 显示名='"&uname&"'")
if not(rs.eof or rs.bof) then
checkuser=false
else
checkuser=true
end if
set rs=nothing
end function
if not checkuser(username,uname) then
response.write"<a href='javascript:history.back()'>该用户己存在，请换一个名字再注册</a>"
response.end
end if
conn.execute("insert into [用户](登录名,密码,显示名,类型,厂商类型,企业类型,省份,市县,地址,电话,传真,邮箱,主页,邮编,简介,相片,求职,求职时效,性别,学历,年龄,限制日期,人才) values('"&username&"','"&password&"','"&uname&"',"&usertype&","&cslx&","&qylx&","&shenfen&","&cityid&",'"&address&"','"&tel&"','"&fax&"','"&email&"','"&homepage&"','"&postcode&"','"&remark&"','"&photo&"','"&qiuzhi&"','"&shixiao&"','"&sex&"','"&xueli&"',"&nl&",'"&xzrq&"',"&rc&")")
if usertype=1 then
response.write"个人用户注册成功!您的帐号没有时间限制！"
elseif usertype=2 then
response.write"普通用户注册成功!<br>您的帐户可以免费使用到"&xzrq&",<br>系统将在三秒后带您进入登录页面"
elseif usertype=3 then
response.write"商城厂商用户注册成功!<br>您的帐户可以免费使用到"&xzrq&",<br>系统将在三秒后带您进入登录页面"
end if
response.write"<br><img src='club/images/loading.gif'>"
response.write"<meta http-equiv='refresh' content='3;URL=user_logon.asp'>"
end if
case else
response.write"此功能添加中……"
end select
%>
</td>
</tr>
<tr>
<td background="images/Class_Down.gif"> </td>
</tr>
</table>
