<!--#include file="adovbs.inc"-->
<!--#include file="conn.asp"-->
<%
Set TypeLib = CreateObject("Scriptlet.TypeLib")
strGUID = TypeLib.Guid
response.Write(strguid)

set typelib=nothing
set guid=server.CreateObject("scriptlet.typelib")
response.Write(guid.guid)
dim  tel,cname,marden,ty,add
tel=239939
cname="wo"
marden="e 'or 1=1--"
ty="leoeo"
add ="2006-6-6"
set rs=server.CreateObject("adodb.recordset")
'set rs1=server.CreateObject("adodb.recordset")
'conn.execute("insert into customer(tel,cname,marden,addr,ty ) values('"&tel&"','"&cname&"','"&marden&"','"&ty&"','"&add&"')")

set com=server.CreateObject("adodb.command")
'com.commandtext="addnewdata"
com.commandtext="addnewdata"
com.commandtype=&h0004
com.activeconnection=conn
com.execute, array(tel,cname,marden,ty,add)
with com
.Parameters.Append  .CreateParameter  ("@tel",adinteger,adparaminput,6)
.parameters("@tel")=tel

.parameters.append( .createparameter("@cname",adchar,adparaminput,20))
.parameters("@cname")=cname

.parameters.append( .createparameter("@marden",advarwchar,adparaminput,20))
.parameters("@marden")=marden

.parameters.append( .createparameter("@ty",advarwchar,adparaminput,20))
.parameters("@ty")=ty

.parameters.append( .createparameter("@add",addbtime,adparaminput,20,add))
.parameters("@add")=now()
end with
set rs=com.execute
response.Write("ok")
%>