--- fenglin/www/show_article.php	2025/03/06 07:39:50	1.9
+++ fenglin/www/show_article.php	2025/03/28 05:50:18	1.14
@@ -1,7 +1,7 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 <?
+	require_once "../lib/db_open.inc.php";
 	require_once "../lib/lml.inc.php";
-	$db_conn=include "./db_open.inc.php";
+
 	if (isset($_GET["aid"]))
 		$aid=intval($_GET["aid"]);
 	else
@@ -74,13 +74,13 @@ TD.content
 	</tr>
 	<tr>
 		<td></td>
-		<td>
+		<td valign="top">
 			<table width="95%" border="0" cellpadding="0" cellspacing="0">
 				<tr height="30">
-					<td align="center"><font size=4><b><? echo $row["title"]; ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
+					<td align="center"><font size=4><b><? echo htmlspecialchars($row["title"], ENT_HTML401, 'UTF-8'); ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
 				</tr>
 				<tr height="20">
-					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo $row["nickname"]; ?></td>
+					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo htmlspecialchars($row["nickname"], ENT_HTML401, 'UTF-8'); ?></td>
 				</tr>
 				<tr height="10">
 					<td></td>
@@ -92,12 +92,12 @@ TD.content
 					<td></td>
 				</tr>
 				<tr>
-					<td class="content"><? echo LML(htmlspecialchars($content, ENT_COMPAT | ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
+					<td class="content"><? echo LML(htmlspecialchars($content, ENT_HTML401, 'UTF-8'), true, true, 1024); ?></td>
 				</tr>
 				<tr>
 					<td>
 						========== * * * * * ==========
-						<br>
+						<br />
 <?
 	$rs_attachment=mysql_query("select * from upload_file where ref_AID=".
 		$row["AID"]." and deleted=0 and deny=0 order by AID")
@@ -120,17 +120,7 @@ TD.content
 			case "jpg":
 			case "jpeg":
 ?>
-						<img onmousewheel="return bbs_img_zoom(event,this)" src="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>">
-<?
-				break;
-			case "swf":
-?>
-						<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000">
-						<param name=movie value="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>">
-						<param name=quality value=high>
-						<embed src="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>" quality=high type="application/x-shockwave-flash">
-						</embed>
-						</object>
+						<img onmousewheel="return bbs_img_zoom(event, this)" src="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>">
 <?
 				break;
 		}

[]	[]
() ：	() ：


========== * * * * * ========== - + - "> - - + ">