editsave.asp

经过一些更改的留言板

<!--#include file="data.asp"-->
<%
if instr(request.servervariables("http_referer"),"edit")<1 then
	response.redirect "index.asp"
end if

if session("bz")<>"bz" then
	connclose()
	session("errmsg")="非法操作！！！"
end if

dim title,email,qq,url,nei,id
dim exec, rs
	 
id=encodestr(Request.form("id"))
title=encodestr(Request.form("title"))
email=encodestr(Request.form("email"))
qq=encodestr(Request.form("qq"))
url=encodestr(Request.form("url"))
nei=replace(Request.form("nei"),"'","""")

if id="" then
	session("errmsg")="非法操作！！！"
	response.redirect("glerror.asp")
end if

if len(title)>40 then
	title=left(title,40)
end if

Set rs = Server.CreateObject("ADODB.Recordset")
exec="select * from ly where id="&id
rs.Open exec,conn,1,2
if rs.eof then
	rsclose()
	connclose()
	session("errmsg")="该留言不存在！！！"
	response.redirect "glerror.asp"
end if
rs("title")=title
rs("email")=email
rs("qq")=qq
rs("url")=url
if instr(nei,"[align=right][ 此留言被版主修改过 ][/align]")>0 then
	rs("nei")=nei
else
	rs("nei")=nei&"[align=right][ 此留言被版主修改过 ][/align]"
end if
rs.update
rsclose()
connclose()

response.redirect "addok.asp"    
%>