addreview.asp

ASP+SQL2000+

<%@ Language=VBScript %>
<!--#include file=include/conn.asp -->
<!--#include file="inc/config.asp"-->
<!--#include file="admin/char.inc"-->
<%
reviewID=Request.Form("reviewID")
NewsID=Request.Form("NewsID")
title=Request.Form("title")
url=trim(Request.Form("url"))
Author=trim(Request.Form("Author"))
if author="" then
Response.Write "请输入您的姓名！"
Response.End
end if
author=replace(author,"'","''")

email=trim(Request.Form("email"))
if email="" then
Response.Write "请输入您的EMAIL。"
Response.End
end if
email=replace(email,"'","''")

content=request.form("content")
dim byte1
byte1=split(byteType,"|")
		for i=0 to ubound(byte1)
		content=replace(content,trim(byte1(i)),"***")
		next
Response.cookies("content")=content
if content="" then
%>
<script language=javascript>
history.back()
alert("请输入评论内容！")
</script>
<%
Response.End
end if
reviewip=Request.ServerVariables("REMOTE_ADDR")
passed=Request.Form("passed")

set rs=server.createobject("adodb.recordset")
sql="select * from review" 
rs.open sql,conn,1,3
rs.addnew
rs("author")=author
rs("content")=content
rs("title")=title
rs("NewsID")=NewsID
rs("passed")=passed
rs("reviewip")=reviewip
rs("email")=email
rs("updatetime")=now()
rs.update
rs.close


reviewid=reviewID+1
newsid=newsid

Response.Redirect url

%>