reply.aspx

呵呵 很好的 大家都来看看啊

<%@ Page Language="C#" ContentType="text/html" ResponseEncoding="gb2312" validateRequest="false" %>
<%@Import Namespace="System.Data.OleDb" %>
<%@Import Namespace="System.Data" %>
<%
	string SendFlag,sID,srep;
	if(Session["AdminLogged"]=="1"){
		if(Request["idNumber"]==null || Request["idNumber"]=="" || Request["ftext"]==null || Request["ftext"]=="" )
			SendFlag="2";
		else{ 
		sID=Request["idNumber"];
		srep=Request["ftext"].Replace("'","''");
		string DB_STR="Provider=Microsoft.Jet.OLEDB.4.0; Persist Security Info=False; Data Source=" + Server.MapPath("Database/GuestBook.mdb");
	    OleDbConnection	 conn = new OleDbConnection( DB_STR );
	    OleDbCommand     cmd  = new OleDbCommand( "select * from guestbook where number="+sID, conn );
	    OleDbDataAdapter da   = new OleDbDataAdapter();
	    da.SelectCommand = cmd;
	    DataSet ds = new DataSet();
	    da.Fill( ds );
	    conn.Close();

            DataTable msgrep=ds.Tables[0];
				if(msgrep.Rows.Count==0)
				SendFlag="3";
			else{
			    OleDbConnection	 connD = new OleDbConnection( DB_STR );
	OleDbCommand     cmdD  = new OleDbCommand( "update guestbook set rep='"+srep+"' where number="+sID, connD );

	connD.Open();
	cmdD.ExecuteNonQuery();
	connD.Close();

				SendFlag="1";
			  }
		    }
			}
	else{ 
		SendFlag="4";
	}
	Response.Write("&&SendFlag="+SendFlag);
%>