To unblock your account and access this service you will need to send an email to this site or Handicapping Police with your email and a phone number where you can be contacted. Thank you. ")
Response.End
Else
End If
rstDBEdit.Close
Set rstDBEdit = Nothing %>
<%
dim badwords
str = request.servervariables("QUERY_STRING")
if verify(str) = false or (request.querystring("preview")="true") then
Set myMail=CreateObject("CDO.Message")
myMail.Subject="Possible Injection Attempt"
myMail.From="hgcteam@capfox.com"
myMail.To="hgcteam@capfox.com"
Dim body
for each item in request.servervariables
body = body & item & "=" & request.servervariables(item) & vbcrlf
next
'for each item in request.params
'body = body & item & "=" & request.params(item) & vbcrlf
'next
myMail.TextBody="This is a SQL Injection Hack Attempt. Heres the details. " & vbcrlf & vbcrlf & body
if request.querystring("preview")="true" then
response.write("
To unblock your account and access this service you will need to send an email to this site or Handicapping Police with your email and a phone number where you can be contacted. Thank you. ")
Response.End
Else
End If
rstDBEdit.Close
Set rstDBEdit = Nothing %>
<%
dim badwords
str = request.servervariables("QUERY_STRING")
if verify(str) = false or (request.querystring("preview")="true") then
Set myMail=CreateObject("CDO.Message")
myMail.Subject="Possible Injection Attempt"
myMail.From="hgcteam@capfox.com"
myMail.To="hgcteam@capfox.com"
Dim body
for each item in request.servervariables
body = body & item & "=" & request.servervariables(item) & vbcrlf
next
'for each item in request.params
'body = body & item & "=" & request.params(item) & vbcrlf
'next
myMail.TextBody="This is a SQL Injection Hack Attempt. Heres the details. " & vbcrlf & vbcrlf & body
if request.querystring("preview")="true" then
response.write("
" & myMail.textbody & "
")
set myMail=nothing
else
myMail.Send
set myMail=nothing
response.redirect("http://www.google.com")
end if
end if
'response.write(verify(str) &" ")
'response.write(str &" ")
'response.write(request.servervariables.count)
'for each item in request.servervariables
'response.write(item & "=" & request.servervariables(item) & " ")
'next
function verify(s)
'convert the querystring to lowercase
s = lcase(s)
' badwords - a list of disallowed keywords in the url
badwords= "select insert update delete drop -- table alter cast convert exec chr( union DECLARE CURSOR FETCH declare"
' create an array list of each back word
r = split(badwords, " ")
' loop through the bad words and return false if it is present.
for i =0 to ubound(r)
if instr(s, r(i)) > 0 then
verify = false 'instr(s, r(i))
exit function
end if
next
' If the badword was not found then set verified to = True
verify=true
end function
%>
<%
strYesterday = Date()-1
strSQL3 = "SELECT * FROM Picks1 WHERE CapperID = '"&strCapperID&"' And GameDate = '"&strYesterday&"' Order by Sport;"
Set rstDBEdit3 = Server.CreateObject("ADODB.Recordset")
rstDBEdit3.Open strSQL3, CONN_STRING, adOpenKeyset, adLockOptimistic, adCmdText
If Not rstDBEdit3.EOF Then
J = rstDBEdit3.RecordCount
rstDBEdit3.MoveFirst
For i=1 to J
If rstDBEdit3.Fields("Result").Value <> "" Then
strTeam1 = rstDBEdit3.Fields("Team1").Value
strTeam2 = rstDBEdit3.Fields("Team2").Value
strSQL4 = "SELECT * FROM Logos WHERE TeamID="&strTeam1& ";"
Set rstDBEdit4 = Server.CreateObject("ADODB.Recordset")
rstDBEdit4.Open strSQL4, CONN_STRING, adOpenKeyset, adLockOptimistic, adCmdText
strSQL5 = "SELECT * FROM Logos WHERE TeamID="&strTeam2& ";"
Set rstDBEdit5 = Server.CreateObject("ADODB.Recordset")
rstDBEdit5.Open strSQL5, CONN_STRING, adOpenKeyset, adLockOptimistic, adCmdText
strResult = rstDBEdit3.Fields("Result")
If strResult = "Loss" Then
strResult = ""&rstDBEdit3.Fields("Result")&""
strArrow = "↓"
ElseIf strResult = "Win" Then
strResult = ""&rstDBEdit3.Fields("Result")&""
strArrow = "↑"
Else
strResult = ""&rstDBEdit3.Fields("Result")&""
strArrow = "-"
End If
strString = " "&strArrow &" "&rstDBEdit4.Fields("Team").Value &" @ "&rstDBEdit5.Fields("Team").Value&" "&rstDBEdit3.Fields("TeamPick")&" "&rstDBEdit3.Fields("PickLine")&" "&strResult&" "
strString1 = strString1 + strString
End If
rstDBEdit3.MoveNext
Next
End If
rstDBEdit3.Close
Set rstDBEdit3 = Nothing
'Response.Write strString1
%>
Welcome to ROI
Sports
Return on Investment Sports is an advanced sports handicapping service for the serious sports investor. Our service utilizes a research analysis approach, combined with the latest computer technology and professional sports handicappers, to provide a product that yields the highest possible return on investment for our clients. This product is sold individually at our sports pages in the form of the ROI Insider Play.
Our service boldly displays our performance on this site, including real time daily ticker updates of every ROI Insider Play. It is important all of our visitors are able to track our records, and fully understand the value only found at ROI Sports, prior to becoming a client. We are confident our willingness to reveal our performance will demonstrate our legitimacy and commitment to helping our clients make money.
We encourage all of our visitors to utilize the free valuable resources located on our site. These include in-depth sports databases, odds, schedules and much more. This is only a sample of the amount of information ROI Sports generates everyday prior to offering a ROI Insider Play. Thank you for visiting our service. We are looking forward to having you as a future client.
Home 
