guestreplyok.asp

ASP+SQL2000+

<!--#include file="include/conn.asp"-->
<!--#include file="include/config.asp"-->
<%if request.cookies("key")="super" then
reviewid=request.form("reviewid")
guestreply=request.form("guestreply")
if guestreply="" then
response.write "<script>alert('回复内容为空');history.go(-1);</Script>"
response.end
end if
set rs=server.createobject("adodb.recordset")
sql="select * from review where reviewid="&reviewid
rs.open sql,conn,1,3
rs("reply")=guestreply
rs.update
rs.close
set rs=nothing
conn.close
set conn=nothing
response.redirect "guestbook.asp"
else
response.write "<script>alert('您无权回复此留言！');history.go(-1);</Script>"
response.end
end if
%>