%
dim xxid, exec, rs
xxid=replace(trim(request("id")),"'","")
if xxid="" or not isnumeric(xxid) then
session("error")="非法访问!"
connclose()
response.redirect "error.asp"
end if
exec="select * from ly where id=" + CStr(xxid) + " "
Set RS = Server.CreateObject("ADODB.RecordSet")
rs.Open exec, Conn, 1, 2
rs("yd")=rs("yd")+1
rs.update
%>
<%=sitetitle%>
">
<%
response.write rs("title")
if not showFace then
userNameNoFace rs("name"),rs("bl"),isMaster(rs("name"))
end if
%>