addnew.asp

大家好

<%@ language="vbscript" %>
<!--#include file="ADOVBS.INC"-->
<script language="vbscript" runat="server">
FUNCTION Check (s)
Dim pos
pos = InStr(s, "'")
 While  pos > 0
 s = Mid(s, 1, pos) & "'" & Mid (s, pos + 1)
 pos = InStr(pos + 2, s, "'")
WEND
Check=s
END FUNCTION
</script>
<%
if trim(request("username"))="" or trim(request("comment")="")  then
   response.write"用户名和内容必须填写"
   response.end
  end if
Set conn = Server.CreateObject("ADODB.Connection")
conn.open Application("DBCon_ConnectionString")
comment=replace(request("comment"),vbcrlf,"<br>")
set rs=server.createobject("ADODB.RecordSet")
sql="select min(xl) as xxl from forum conn"
rs.open sql,conn,adOpenkeyset,adlockoptimistic,adcmdtext
rs.movefirst
dim xl_l
dim i
if isnull(rs("xxl")) or isempty(rs("xxl")) then
	xl_l="99999"
else
	xl_l=cstr(rs("xxl")-1)
end if
for i=1 to 5-len(xl_l)				
 xl_l="0"+xl_l
 next
comment=replace(request("comment"),vbcrlf,"<br>")
insertnum=0		
sqltext="insert forum(username,title,comment,brow,xl,regtime) values('"&check(request("username"))&"','"&check(request("title"))&"','"&check(comment)&"','"&request("brow")&"','"&xl_l&"',getdate())"
conn.execute sqltext,insertnum

if insertnum=1 then
 response.redirect "default.asp"
 rs.close
 conn.close
else
  response.write "insert failed!"
  rs.close
  conn.close
end if 
%>