% id=Request("id") If id ="" then Response.Write("") end if if instr(id,"'") or instr(id,"select") or instr(id,"in") or instr(id,"from") or instr(id,"len") or instr(id,"where") or instr(id,"or") or instr(id,"and") then Response.Write("") Response.End end if conn.execute("update news set click=click+1 where ID=" & id) sql10="select * from news where id="&id&" order by updatetime desc, id desc" Set rs10= Server.CreateObject("ADODB.Recordset") rs10.open sql10,conn,1,1 tp=rs10("tp") sql1="select * from classname where id="&tp&" order by ID " Set rs1= Server.CreateObject("ADODB.Recordset") rs1.open sql1,conn,1,1 dl=rs1("dl") if rs10("classname")<>"" and rs10("classname3")=1000 then classname=rs10("classname") sql2="select * from classname where id="&classname&" order by ID " Set rs2= Server.CreateObject("ADODB.Recordset") rs2.open sql2,conn,1,1 dl2=rs2("dl2") end if %>