fbsp_fp.asp

网上新闻调查发布系统

<%@LANGUAGE="VBSCRIPT"%>
<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers=""
MM_authFailedURL="m.asp"
MM_grantAccess=false
If Session("MM_Username") <> "" Then
  If (true Or CStr(Session("MM_UserAuthorization"))="") Or _
         (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = "?"
  If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
  MM_referrer = Request.ServerVariables("URL")
  if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
  MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%>
<!--#include file="myzb.asp" -->
<%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME"))
If (Request.QueryString <> "") Then
  MM_editAction = MM_editAction & "?" & Server.HTMLEncode(Request.QueryString)
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Insert Record: set variables

If (CStr(Request("MM_insert")) = "form1") Then

  MM_editConnection = MM_myzb_STRING
  MM_editTable = "sp"
  MM_editRedirectUrl = "fbsp_list.asp"
  MM_fieldsStr  = "spmc|value|spjj|value|fbr|value|fbdw|value|sppic|value|bz|value|zt|value"
  MM_columnsStr = "spmc|',none,''|spjj|',none,''|fbr|',none,''|fbdw|',none,''|sppic|',none,''|bz|',none,''|zt|',none,''"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Insert Record: construct a sql insert statement and execute it

Dim MM_tableValues
Dim MM_dbValues

If (CStr(Request("MM_insert")) <> "") Then

  ' create the sql insert statement
  MM_tableValues = ""
  MM_dbValues = ""
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),",")
    MM_delim = MM_typeArray(0)
    If (MM_delim = "none") Then MM_delim = ""
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = "none") Then MM_altVal = ""
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = "none") Then MM_emptyVal = ""
    If (MM_formVal = "") Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal <> "") Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = "'") Then  ' escape quotes
        MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i <> LBound(MM_fields)) Then
      MM_tableValues = MM_tableValues & ","
      MM_dbValues = MM_dbValues & ","
    End If
    MM_tableValues = MM_tableValues & MM_columns(MM_i)
    MM_dbValues = MM_dbValues & MM_formVal
  Next
  MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")"

  If (Not MM_abortEdit) Then
    ' execute the insert
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
Dim Recordset1
Dim Recordset1_numRows

Set Recordset1 = Server.CreateObject("ADODB.Recordset")
Recordset1.ActiveConnection = MM_myzb_STRING
Recordset1.Source = "SELECT * FROM usero where dengluming='"&Session("MM_Username")&"'"
Recordset1.CursorType = 0
Recordset1.CursorLocation = 2
Recordset1.LockType = 1
Recordset1.Open()

Recordset1_numRows = 0
%>
<HTML>
<HEAD>
<TITLE>未标题-1</TITLE>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=gb2312">
<link href=images/k.css rel=stylesheet>
<style type="text/css">
.mm_botton{
border-top: #c4cccc 3px double; 
border-right: #acb5b5 3px double; 
border-bottom: #6f7777 3px double;
border-left: #acb5b5 3px double; 
background: url(images/background_form_element.gif) #fefefe repeat-x; 
font:12px tahoma;
padding-top:2px;
padding-bottom:2px;
padding-left:2px;
padding-right:3px;
text-decoration: none;
color:#666666;
}

.mm_botton:link{
color:#666666;
}

.mm_botton:hover{
border-top: #aedf9a 3px double; 
border-right: #94da78 3px double; 
border-bottom: #6ab94b 3px double;
border-left: #94da78 3px double; 
text-decoration:none;
color:#999999;
}

<!--
body {
	background-image: url(images/bg.gif);
}
.style1 {font-size: 12px}
body,td,th {
	font-size: 12px;
}
-->
</style>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_validateForm() { //v4.0
  var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
  for (i=0; i<(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
    if (val) { nm=val.id; if ((val=val.value)!="") {
      if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
        if (p<1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
      } else if (test!='R') { num = parseFloat(val);
        if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
        if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
          min=test.substring(8,p); max=test.substring(p+1);
          if (num<min || max<num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
    } } } else if (test.charAt(0) == 'R') errors += '- '+nm+' 项目是空的.\n'; }
  } if (errors) alert('发现以下错误:\n'+errors);
  document.MM_returnValue = (errors == '');
}
//-->
</script>
</HEAD>
<BODY BGCOLOR=#FFFFFF LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0>
<!-- ImageReady Slices (未标题-1) -->
<TABLE WIDTH=513 height="422" BORDER=0 CELLPADDING=0 CELLSPACING=0>
	<TR>
		<TD COLSPAN=3><span class="style1">.....................................................................................</span></TD>
	</TR>
	<TR>
		<TD width="139" ROWSPAN=2 align="center" valign="top"><div align="center">
		  <p><img src="images/fbsp.gif" width="133" height="150"></p>
		  <table width="92" height="133" border="0">
            <tr>
              <td width="86" align="center" valign="middle" scope="col"><div align="center"><a href="fbsp_fp.asp"><img src="images/fb1.gif" width="85" height="21" border="0"></a></div></td>
            </tr>
            <tr>
              <td align="center" valign="middle"><div align="center"><a href="fbsp_list.asp"><img src="images/fb2.gif" alt="fb" width="85" height="21" border="0"></a></div></td>
            </tr>
            <tr>
              <td align="center" valign="middle"><div align="center"><a href="fbsp.asp"><img src="images/fb3.gif" width="85" height="21" border="0"></a></div></td>
            </tr>
          </table>
		  <p>&nbsp;</p>
		</div></TD>
		<TD width="365" height="13">&nbsp;			</TD>
		<TD width="20" ROWSPAN=2>&nbsp;			</TD>
	</TR>
	<TR>
		<TD align="center" valign="top">对于您发布的信息,我们的管理人员将对您的信息审核.&nbsp;
          <form method="post" action="<%=MM_editAction%>" name="form1">
            <table align="center">
              <tr valign="baseline">
                <td align="right" valign="middle" nowrap>商品名称:</td>
                <td><input type="text" name="spmc" id="商品名称"value="" size="32">
                </td>
              </tr>
              <tr valign="baseline">
                <td align="right" valign="middle" nowrap>商品介绍:</td>
                <td><textarea name="spjj" cols="34" id="商品介绍"rows="5"></textarea>
                </td>
              </tr>
              <tr valign="baseline">
                <td align="right" valign="middle" nowrap>图片地址:</td>
                <td><input name="sppic" type="text" id="商品图片"value="images/nosppic.gif" size="32">
                </td>
              </tr>
              <tr valign="baseline">
                <td align="right" valign="middle" nowrap>备注:</td>
                <td><textarea name="bz" cols="34" id"备注"rows="8">无</textarea></td>
              </tr>
              <tr valign="baseline">
                <td align="right" valign="middle" nowrap><input name="zt" type="hidden" id="zt" value="1">
                  <input name="fbdw" type="hidden" id="fbdw" value="<%=(Recordset1.Fields.Item("danwei").Value)%>">
                <input name="fbr" type="hidden" id="fbr" value="<%=Session("MM_Username")%>"></td>
                <td>                  <input type="submit" class="mm_botton" onClick="MM_validateForm('spmc','','R','sppic','','R','spjj','','R','bz','','R');return document.MM_returnValue" value="发布">
                  <input name="Submit" type="reset" class="mm_botton" value="重置">
</td>
              </tr>
            </table>
            <input type="hidden" name="MM_insert" value="form1">
          </form>
        </TD>
	</TR>
</TABLE>
</BODY>
</HTML>
<%
Recordset1.Close()
Set Recordset1 = Nothing
%>