devolve_art_submit.asp

都市星空BBS系统 v1.1(SQL)

<%
'==============================================================================
'软件名称：星空社区 VER 1.0.15
'当前版本：starcity club V1.0.15
'最新更新：2004.9
'==============================================================================
'Copyright (C) 2002-2004 Googln.com  All rights reserved.
'商业注册联系：010-64410364
'技术支持QQ：6370639(限商业用户) 
'程序开发：Googln Studio(BeiJing)
'Email:[e-mail]
'论坛支持：星空社区(http://www.starcity.cn/bbs)
'官方网站：www.Googln.com  演示站点：www.starcity.cn/bbs  都市星空：www.starcity.cn 阳光商城:www.sunmall.com.cn
'==============================================================================
'免费版本请在首页保留版权信息，并做上本站LOGO友情连接
'都市星空在线保留此程序的法律追究权利
'==============================================================================
%>
<!--#include file="include/conn.asp"-->
<!-- #include file="inc.asp" -->
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="stylesheet" type="text/css" href="include/style_.css">
<%
boardid=trim(request("boardid"))
bbsid=trim(request("bbsid"))
if boardid="" or bbsid="" then
	show_error("请选择论坛版块及文章修改")
end if

'添加验证输入信息合法性 2004/05/11
	if instr(boardid,"'")<>0 or instr(boardid,"=")<>0 or instr(boardid,"&")<>0 or instr(boardid,"%")<>0 or instr(boardid,"or")<>0 then 
	    show_error("出现非法字符,对不起!") 
	end if
	if instr(bbsid,"'")<>0 or instr(bbsid,"=")<>0 or instr(bbsid,"&")<>0 or instr(bbsid,"%")<>0 or instr(bbsid,"or")<>0 then 
	    show_error("出现非法字符,对不起!") 
	end if
	
%>
<%
if session("username")="" or isempty(session("username")) then
%>
                <table width="600"  border="0" align="center" cellpadding="0" cellspacing="0">
                  <tr>
                    <td><img src="images/bbs_0.gif" width="600" height="11"></td>
                  </tr>
                  <tr>
                    <td height="25" background="images/bbs_2.gif"><table  border="0" align="center" cellpadding="1" cellspacing="3">
                        <tr>
                          <td>&nbsp;您还没有登录或登录超时，请重新登录！</td>
                          <td><a href="reg.asp"><img src="images/ehouse_21.gif" width="74" height="19" border="0"></a></td>
                          <td><a href="login.asp"><img src="images/login.gif" width="64" height="19" border="0"></a></td>
                        </tr>
                    </table></td>
                  </tr>
                  <tr>
                    <td valign="top"><img src="images/bbs_3.gif" width="600" height="12"></td>
                  </tr>
                </table>
                <p>
<%
else
'检查文章及斑竹
set rs=server.createobject("adodb.recordset")
sqltext="select db_bbs.*,db_board.boardid,db_board.boardmaster from db_bbs,db_board where db_bbs.bbsid="&bbsid&"and db_board.boardid="&boardid

rs.open sqltext,conn,1,1	
if session("username")<>rs("boardmaster") and session("username")<>rs("author") then
	show_error("您没有修改此文章的权限!")
end if
%>
</p>
                <p>&nbsp;</p>
                <form name="form2" method="post" action="devolve_art_submitsave.asp?boardid=<%=request("boardid")%>&bbsid=<%=request("bbsid")%>"><table width="95%"  border="0" align="center" cellpadding="5" cellspacing="1" bgcolor="#E7E7E7">
                  <tr bgcolor="#F7F7F7">
                    <td colspan="2">此帖目前属于<font color=red>
<%
		rsboard.movefirst
		do while not rsboard.eof
		  if cint(rsboard("boardid"))=cint(boardid) then 
		   response.write rsboard("boardname")
		  end if
 		rsboard.movenext
 		loop
		rsboard.close
		set rsboard=nothing
%>
<%
		set rsboard=server.createobject("adodb.recordset")
		sqltext="select db_board.boardid,db_board.boardname,db_board.boardmaster,db_user.id,db_user.username,db_user.name from db_board,db_user order by boardid asc"
		'response.write sqltext
		rsboard.open sqltext,conn,1,1
%></td>
  </tr>
                  <tr bgcolor="#FFFFFF">
                    <td width="100">转到：</td>
                    <td><select name="selectboard" >
                      <%			

		rsboard.movefirst
		do while not rsboard.eof
		%>
                      <option value=<%=rsboard("boardid")%>><%=rsboard("boardname")%></option>
                      <%
						  
 		rsboard.movenext
 		loop
		rsboard.close
		set rsboard=nothing
		%>
                    </select></td>
                  </tr>
                  <tr bgcolor="#F7F7F7">
                    <td>&nbsp;</td>
                    <td bgcolor="#F7F7F7"><input type="hidden" name="bbsid" value=<%=bbsid%>>
                    <input type="hidden" name="boardid" value=<%=boardid%>></td>
                  </tr>
                </table>
                <div align="center">
                  <div align="center">
                    <input type="submit" name="Submit3" value="转帖">
                  </div>
</form>
<%end if%>