add.aspx

呵呵 很好的 大家都来看看啊

<%@ Page Language="C#" ContentType="text/html" ResponseEncoding="gb2312" validateRequest="false" %>
<%@Import Namespace="System.Data.OleDb" %>
<%@Import Namespace="System.Data" %>
<%
string cicon,curFace;
if(Request["cicon"]==null || Request["cicon"]=="")cicon="1";
else{
cicon=Request["cicon"];
}
if(Request["curFace"]==null || Request["curFace"]=="")curFace="1";
else{
curFace=Request["curFace"];
}
string strAdd = "INSERT INTO guestbook ([username],[email],[icq],[face],[icon],[url],[mes],[subj]) VALUES ('" + Request["username"] + "', '" +Request["email"] + "', '" + Request["icq"] + "', " + curFace + "," + cicon + ", '" +Request["inurl"] + "','" + Request["ftext"].Replace("'","''") + "', '" + Request["subject"] +"')";
string DB_STR="Provider=Microsoft.Jet.OLEDB.4.0; Persist Security Info=False; Data Source=" + Server.MapPath("Database/GuestBook.mdb");
OleDbConnection objConnect = new OleDbConnection(DB_STR);

				objConnect.Open();

				OleDbCommand objCommand = new OleDbCommand(strAdd, objConnect);

				objCommand.ExecuteNonQuery();
				objConnect.Close();
	Response.Write("&&sendFlag=1");
%>