save_msg.asp

一个不错的竞价程序

<!-- #include file="inc/info.asp" -->
<!-- #include file="inc/const.asp" -->

<!-- #include file="conn.asp" -->
<%response.buffer=true
if session("user")="" then
response.redirect "login.asp"
else
header

'on error resume next
	ownerid=rst("ownerid")
	aucid=rst("aucid")
	writerid=rst("writerid")
	writedate=rst("writedate")
	'content=rst("content")
content=SQLStr(rst("content"))
content=replace(content,"<","&lt;")

content=replace(content,">","&gt;")
content=replace(content,"'","''")
content=replace(content,chr(34),"“")
content=replace(content,"%","%")
	sql="insert into msg (aucid,writerid,writedate,content,ownerid) values('"&aucid&"','"&writerid&"','"&writedate&"','"&content&"','"&ownerid&"')"
	conn.execute(sql)

response.write "你的留言已经保存，请等待卖家回复！"
end if
footer
%>