WooYun.org

Dim ID
	ID = SafeRequestString("ID")
	'是否使用mediaplayer直接打开
	sSql = "select SettingValue from B_B_Syssetting where SettingName='OpenLiveInMP'"
	OpenLiveInMP = oDB.GetOneData(sSql)
	
	'---------------------------------------------------------------
	'得到直播的路径
	Dim sUrl
	Set oRes = Server.CreateObject("ASVodIA.UniCastMng")
	sUrl = oRes.PlayLiveFile(ID)
	
	if OpenLiveInMP = "1" then
		sUrl = oRes.DecodeURL(sUrl)
	end if
		
	ntype = 1
	if oDB.IsMySQL() = 1 then
		sSql = "select concat((case type when 1 then '广播:' else '直播:' end),Name) as name,type,liveGuid from JV_BCStations where id="&ID
	else
		sSql = "select (case type when 1 then '广播:' else '直播:' end)+Name as  name,type,liveGuid from JV_BCStations where id="&ID
	end if
	'sName = oDB.GetOneData(sSql)
	set oRs = oDB.GetRecordSet(sSql)
	if not oRs is nothing then
		if not oRs.eof then
			ntype = oRs("type")
			sName = oRs("name")
		end if
	end if

<!--#include virtual="/VOD2005/Public/Asp/CommonFun.asp" -->

Function SafeRequestString(ParaName)		
    
	Dim ParaValue
	Dim TmpValue
	ParaValue = Request(ParaName)
	TmpValue = ParaValue
	if ParaValue="" then
	    SafeRequestString = ParaValue
	    Exit Function
	end if
	
	
	if not isValidStr(TmpValue) then
	    response.Write ParaName&"="&ParaValue
	    response.Write "请不要在参数中包含非法字符尝试注入！"
	    SafeRequestString = ""
	    Response.End 
	else	
	ParaValue=replace(ParaValue,"'","''")
	SafeRequestString = ParaValue
	end if