glguestbook.asp

体育商城

<%@LANGUAGE="VBSCRIPT"%> 
<!--#include file="Connections/conn.asp" -->
<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers="admin,news,user"
MM_authFailedURL="adminloginerr.asp"
MM_grantAccess=false
If Session("MM_Username") <> "" Then
  If (false Or CStr(Session("MM_UserAuthorization"))="") Or _
         (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = "?"
  If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
  MM_referrer = Request.ServerVariables("URL")
  if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
  MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%>
<%
' *** Edit Operations: declare variables

MM_editAction = CStr(Request("URL"))
If (Request.QueryString <> "") Then
  MM_editAction = MM_editAction & "?" & Request.QueryString
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_conn_STRING
  MM_editTable = "guestbook"
  MM_editColumn = "id"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = "managebook.ASP"
  MM_fieldsStr  = "textfield|value|hiddenField|value"
  MM_columnsStr = "huifu|',none,''|hfdate|',none,''"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(i+1) = CStr(Request.Form(MM_fields(i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql update statement
  MM_editQuery = "update " & MM_editTable & " set "
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    FormVal = MM_fields(i+1)
    MM_typeArray = Split(MM_columns(i+1),",")
    Delim = MM_typeArray(0)
    If (Delim = "none") Then Delim = ""
    AltVal = MM_typeArray(1)
    If (AltVal = "none") Then AltVal = ""
    EmptyVal = MM_typeArray(2)
    If (EmptyVal = "none") Then EmptyVal = ""
    If (FormVal = "") Then
      FormVal = EmptyVal
    Else
      If (AltVal <> "") Then
        FormVal = AltVal
      ElseIf (Delim = "'") Then  ' escape quotes
        FormVal = "'" & Replace(FormVal,"'","''") & "'"
      Else
        FormVal = Delim + FormVal + Delim
      End If
    End If
    If (i <> LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery & ","
    End If
    MM_editQuery = MM_editQuery & MM_columns(i) & " = " & FormVal
  Next
  MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the update
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
Dim Recordset1__MMColParam
Recordset1__MMColParam = "1"
if (Request.QueryString("id") <> "") then Recordset1__MMColParam = Request.QueryString("id")
%>
<%
set Recordset1 = Server.CreateObject("ADODB.Recordset")
Recordset1.ActiveConnection = MM_conn_STRING
Recordset1.Source = "SELECT * FROM guestbook WHERE id = " + Replace(Recordset1__MMColParam, "'", "''") + " ORDER BY id DESC"
Recordset1.CursorType = 0
Recordset1.CursorLocation = 2
Recordset1.LockType = 3
Recordset1.Open()
Recordset1_numRows = 0
%>
<html>
<head>
<title>访客留言</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="stylesheet" href="ddd.css" type="text/css">
</head>
<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<!--#include file="manage.asp" -->
<!--#include file="top.asp" -->
<!--#include file="ubb/ubb.asp" -->
<table width="771" border="0" cellspacing="0" cellpadding="0" align="center" height="76" class="bk1">
  <tr> 
    <td height="83" valign="top"> 
      <p align="center"><font size="3"><b><font color="#000000"><br>
        <img src="images/fkly.gif" width="286" height="37"></font></b></font></p>
      <form name="form1" method="POST" action="<%=MM_editAction%>">
        <table width="75%" border="1" align="center" cellspacing="2" cellpadding="0" bordercolor="#FFFFFF" height="117">
          <tr bordercolor="#000000"> 
            <td width="22%" height="75" background="images/bgly.gif"> 
              <table width="100%" border="0" align="center" cellpadding="0" cellspacing="2">
                <tr> 
                  <td height="134" valign="bottom"> 
                    <div align="center"><span class="dfont"><%=(Recordset1.Fields.Item("lyname").Value)%></span><br>
                      <img src="<%=(Recordset1.Fields.Item("face").Value)%>"><br>
                      <br>
                    </div>
                  </td>
                </tr>
                <tr> 
                  <td height="9"><a href="mailto:<%=(Recordset1.Fields.Item("lyemail").Value)%>"><img src="images/email.gif" width="16" height="16" border="0"></a>　　<a href="<%=(Recordset1.Fields.Item("lyurl").Value)%>"><img src="images/home.gif" width="16" height="16" border="0"></a>　　<img src="images/oicq.gif" width="16" height="16" alt="<%=(Recordset1.Fields.Item("lyqq").Value)%>"></td>
                </tr>
              </table>
            </td>
            <td width="78%" height="75" bgcolor="#FFFFFF"> 
              <table width="100%" border="0" cellspacing="0" cellpadding="0" height="146">
                <tr> 
                  <td height="89" valign="top"> <span class="dfont">　<img src="images/userlist.gif" width="16" height="16"><%=(Recordset1.Fields.Item("lyip").Value)%>　　　　　　　　　　　　　<img src="images/foot.gif" width="16" height="16"></span> 
                    <span class="dfont"><%=(Recordset1.Fields.Item("lydate").Value)%></span> 
                    <table width="94%" border="0" align="center" background="images/bgly1.gif" class="textk" cellspacing="0" cellpadding="0">
                      <tr> 
                        <td height="62" valign="top"><img src="images/wave.gif" width="16" height="16"><%=ubbcode(Recordset1.Fields.Item("lyneirong").Value)%></td>
                      </tr>
                    </table>
                  </td>
                </tr>
                <tr> 
                  <td height="49"> 
                    <% If (Recordset1.Fields.Item("hfdate").Value) <> ("") Then 'script %>
                    <table width="94%" border="0" align="center" class="textk" cellspacing="0" cellpadding="0" height="17" background="images/bgly1.gif">
                      <tr> 
                        <td height="29"><font color="#FF0000">站长回复：</font><%=(Recordset1.Fields.Item("huifu").Value)%><img src="images/messages3.gif" width="12" height="11"></td>
                      </tr>
                    </table>
                    <% End If ' end If (Recordset1.Fields.Item("hfdate").Value) <> ("") script %>
                  </td>
                </tr>
              </table>
            </td>
          </tr>
          <tr bordercolor="#000000"> 
            <td width="22%" height="18" background="images/bgly.gif"><font color="#FF0000"><b class="dfont">站长回复：</b></font></td>
            <td width="78%" height="18" bgcolor="#FFFFFF"> 
              <div align="center"> 
                <textarea name="textfield" class="anniu" cols="70" rows="7"></textarea>
              </div>
            </td>
          </tr>
        </table>
        <p align="center"> 
          <input type="submit" name="Submit" value="回复">
          <input type="hidden" name="hiddenField" value="<%=now()%>">
        </p>
        <input type="hidden" name="MM_update" value="true">
        <input type="hidden" name="MM_recordId" value="<%= Recordset1.Fields.Item("id").Value %>">
      </form>
      <p align="center">&nbsp;</p>
      <p align="center">&nbsp;</p>
    </td>
  </tr>
</table>
<br>
<!--#include file="bottom.asp" -->
</body>
</html>
<%
Recordset1.Close()
%>