edit_save.asp

这是ASP的OA

<!-- #include file="const.asp" -->
<!-- #include file="GetMp3_function.asp" -->
<!-- #include file="power_func.asp" -->
<%
dim id,sql,rs,topic,author,content,FID,canedit,face,html,uploadfile,filepath,viewsign,addtime,csize
csize=0
html=0
canedit=0
id=request("id")
topic=request.Form("topic")
face=trim(request.Form("faceid"))
content=request.Form("content")
if request.Cookies("matrix3")("matrix3_admin")="matrix3" then
	filepath=trim(request.Form("filepath"))
	uploadfile=trim(request.Form("uploadfile"))
end if
viewsign=request.Form("viewsign")
if viewsign="" then
	viewsign=0
else
	viewsign=cint(viewsign)
end if
if not IsNumeric(id) then
	response.write("<script>alert('非法的参数');history.back();</script>")
	response.End()
end if
if topic="" then
	response.write("<script>alert('请输入主题');history.back();</script>")
	response.End()
end if
if id="" then
	response.Redirect("error.asp?id=3")
	response.End()
else
	csize=len(content)
	if request.Cookies("matrix3")("matrix3_admin")<>"matrix3" then
		if csize>15000 then 
			response.write("<script>alert('文章内容太长，超过了15K！');history.back();</script>")
			response.End()
		end if
		topic=server.HTMLEncode(topic)
		if filepath<>"" then filepath=server.HTMLEncode(filepath)
		if uploadfile<>"" then uploadfile=server.HTMLEncode(uploadfile)
	end if
	face=left(face,2)
	call opendb()
	if isadmin()=1 then
		canedit=1
	else
		checkuser()
		sql="select FID,name,html from m3_bbs where id="&id&""
		set rs=server.CreateObject("adodb.recordset")
		rs.open sql,conn,1,1
		if rs.eof and rs.bof then
			rs.close
			set rs=nothing
			call closedb()
			response.Redirect("error.asp?id=2")
			response.End()
		else
			author=rs("name")
			FID=rs("FID")
			html=cint(rs("html"))
		end if
		rs.close
		set rs=nothing
		if html=1 then
			response.Redirect("error.asp?id=10")
			response.End()
		else
			if author=request.Cookies("matrix3")("matrix3_name") then
				canedit=1
			else
				if havepower(FID)=1 then
					canedit=1
				end if
			end if
		end if
	end if
	if canedit=0 then
		call closedb()
		response.Redirect("error.asp?id=1")
		response.End()
	else
		sql="select topic,content,html,lasttime,uploadfile,face,filepath,viewsign,addtime,csize from m3_bbs where id="&id&""
		set rs=server.CreateObject("adodb.recordset")
		rs.open sql,conn,1,3
		if rs.eof and rs.bof then
			rs.close
			set rs=nothing
			call closedb()
			response.Redirect("error.asp?id=2")
			response.End()
		else
			rs("topic")=topic
			rs("content")=content
			rs("face")=face
			rs("csize")=csize
			'rs("lasttime")=now
			if request.Cookies("matrix3")("matrix3_admin")="matrix3" then
				rs("filepath")=filepath
				rs("uploadfile")=uploadfile
			end if
			rs("viewsign")=viewsign
			rs("html")=0
			rs.update
			addtime=rs("addtime")
		end if
		rs.close
		set rs=nothing
		sql="update m3_forum set lasttopic='"&topic&"' where topicid="&id&""
		conn.execute(sql)
		'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
		call batchmodmp3(content,topic,datevalue(addtime),author,id)
		'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
		response.write("<script>alert('编辑成功 !');location.href='treelist.asp?id="&id&"';</script>")
	end if
	call closedb()
end if
function getfilename(filename)
	if isnull(filename) then exit function
	if instr(filename,"/")>0 then
		getfilename=lcase(mid(filename,instrRev(filename,"/")+1))
	else
		getfilename=filename
	end if
end function
%>