★★★★☆高分求随机排列问题。不够再加！

1、9个字符定义为数组chars[9]
2、建立一个3*3的table
3、
var i=9;
while(i>0){
  table.cells(i-1).innerHTML = a[i-1]
  i--;
  a.length = i
}

还是把代码给你吧<body>
<input type=button onclick="cr()" value="click here"><table id="a1">
<tr>
<td></td><td></td><td></td>
</tr>
<tr>
<td></td><td></td><td></td>
</tr>
<tr>
<td></td><td></td><td></td>
</tr>
</table></body><script>
function cr(){
var a = new Array("1","2","3","4","5","6","7","8","9");
var i=9;
while(i>0){
  var tmp = Math.floor(Math.random()*i);
  document.all.a1.cells(i-1).innerHTML = a[tmp];
  for (var j=tmp;j<i-1;j++){
a[j] = a[j+1];
  }
  i--;
  a.length = i;
}
}
</script>
<script>
var str="123456789";
var ok = new Array();
for(var i=0;i<9;i++)
{
    var tmp = Math.floor(Math.random()*str.length);
ok[i]=str.charAt(tmp);
str=str.replace(ok[i],"")
}
alert(ok)
</script>
<script>
var str="123456789";
var ok = new Array();
for(var i=0;i<9;i++)
{
    var tmp = Math.floor(Math.random()*str.length);
ok[i]=str.charAt(tmp);
str=str.replace(ok[i],"")
}
function createtb(arr)
{
    var tb = document.createElement("table");
    for(var i=0;i<arr.length;i++)
{
    if(i % 3 == 0)newRow = tb.insertRow(0);
newCell = newRow.insertCell(0);
newCell.innerText = arr[i]
}
document.body.appendChild(tb);
}
</script>
<body onload="createtb(ok)">
我想在 <td></td>上加上事件，
如：<td onClick="form_promote.password.value+=msg+'1'"></td>
怎样把上面的变量同上添加到<td >内。
谢谢，我急用啊！