addfriend.asp

电子商务网络购物系统

<% Option Explicit %>
<!--#include file="conn.asp" -->
<%
Response.Buffer = True

Dim rsAddBuddyList
Dim strUsername
Dim strDescription
Dim blnBlocked
Dim intCode
Dim intErrorNum
Dim lngAuthorID

intCode = 1

If blnPrivateMessages = False Then 
	Set rsConn = Nothing
	adoCon.Close
	Set adoCon = Nothing
	Response.Redirect("index.asp")
End If
If intGroupID = 2 OR blnActiveMember = False Then 
	Set rsConn = Nothing
	adoCon.Close
	Set adoCon = Nothing
	Response.Redirect("nopermission.asp")
End If
strUsername = Trim(Mid(Request.Form("username"), 1, 15))
strDescription = Trim(Mid(Request.Form("description"), 1, 30))
blnBlocked = CBool(Request.Form("blocked"))
strUsername = disallowedMemberNames(strUsername)
strUsername = formatSQLInput(strUsername)
strDescription = formatInput(strDescription)
strSQL = "SELECT timesuser.userid FROM timesuser "
strSQL = strSQL & "WHERE timesuser.Username = '" & strUsername & "';"
rsConn.Open strSQL, adoCon
If NOT rsConn.EOF Then
	lngAuthorID = CLng(rsConn("userid"))
	Set rsAddBuddyList = Server.CreateObject("ADODB.Recordset")
	strSQL = "SELECT timesfriend.* FROM timesfriend "
	strSQL = strSQL & "WHERE timesfriend.friendid = " & lngAuthorID & " AND timesfriend.userid = " & lngLoggedInUserID & ";"
	rsAddBuddyList.CursorType = 2
	rsAddBuddyList.LockType = 3
	rsAddBuddyList.Open strSQL, adoCon
	If rsAddBuddyList.EOF Then
		rsAddBuddyList.AddNew
		rsAddBuddyList.Fields("userid") = lngLoggedInUserID
		rsAddBuddyList.Fields("friendid") = lngAuthorID
		rsAddBuddyList.Fields("Description") = strDescription
		rsAddBuddyList.Fields("Block") = blnBlocked
		rsAddBuddyList.Update
		intCode = 2
	Else
		intErrorNum = 1
	End If
	rsAddBuddyList.Close
	Set rsAddBuddyList = Nothing
Else
	intErrorNum = 2
End If
rsConn.Close
Set rsConn = Nothing
adoCon.Close
Set adoCon = Nothing
strUsername = Replace(strUsername, "''", "'", 1, -1, 1)
Response.Redirect "friendlist.asp?name=" & Server.URLEncode(strUsername) & "&desc=" & Server.URLEncode(strDescription) & "&code=" & intCode & "&ER=" & intErrorNum
%>