%Checklogin("信息管理")%> <% str=TextEnCode(Request.QueryString("str")) Set Rs=Server.CreateObject("Adodb.Recordset") sql="select id,ProductImg,ProductName,unit from Products where productName like '%"&str&"%'" Rs.open sql,conn,1,3 Do while Not Rs.bof and Not Rs.eof %>