以下是我做的判断，还不全，麻烦会的帮忙看一下~

Question

http://localhost:800/design.asp?p_cata=25 是正常的.

当地址栏输入
http://localhost:800/design.asp 或
http://localhost:800/design.asp?p_cata= 或
http://localhost:800/design.asp?p_cata=dfsd 不是数字或乱码

的时候.asp 作个判断. 不同的情况下作出不同的输出.
以下是我做的判断.还不全.
if not isnumeric(request.querystring("p_cata")) and request.querystring("p_cata")="" and request.querystring("p_cata")<>"" then
set rs=server.CreateObject("adodb.recordset")
Ssql="select * from product where py_id=0" 'py_id 0在数据库固定的
rs.open Ssql,conn,1,1
temp=1
else
set rs=server.CreateObject("adodb.recordset")
Ssql="select * from product where p_cate="&Trim(Request.QueryString("p_cata"))
rs.open Ssql,conn,1,1
temp=1
end if

Answer 1

if not isnumeric(request.querystring("p_cata")) or request.querystring("p_cata")="" or request.querystring("p_cata")<>"" thenresponse.write "<script language='javascript'>alert('参数错误');history.go(-1);</script>"elseset rs=server.CreateObject("adodb.recordset")Ssql="select * from product where p_cate="&Trim(Request.QueryString("p_cata"))rs.open Ssql,conn,1,1temp=1end if以上你仔细品味一下