update.aspx

呵呵 很好的 大家都来看看啊

<%@ Page Language="C#" ContentType="text/html" ResponseEncoding="gb2312" validateRequest="false" %>
<%@Import Namespace="System.Data.OleDb" %>
<%@Import Namespace="System.Data" %>
<%
	string sID,SendFlag;
	if(Session["AdminLogged"]=="1"){
	       if(Request["idNumber"]==null || Request["idNumber"]=="")
			SendFlag="2";
		else{ 
		sID=Request["idNumber"];
		string DB_STR="Provider=Microsoft.Jet.OLEDB.4.0; Persist Security Info=False; Data Source=" + Server.MapPath("Database/GuestBook.mdb");
	    OleDbConnection	 conn = new OleDbConnection( DB_STR );
	    OleDbCommand     cmd  = new OleDbCommand( "select * from guestbook where number="+sID, conn );
	    OleDbDataAdapter da   = new OleDbDataAdapter();
	    da.SelectCommand = cmd;
	    DataSet ds = new DataSet();
	    da.Fill( ds );
	    conn.Close();

            DataTable msgrep=ds.Tables[0];
				if(msgrep.Rows.Count==0)
				SendFlag="3";
			else{
			    OleDbConnection	 connD = new OleDbConnection( DB_STR );
				string cmdStr= "update guestbook set rep='"+Request["reply"].Replace("'","''");
				cmdStr+="',username='"+Request["username"];
				cmdStr+="',email='"+Request["email"];
				cmdStr+="',icq='"+Request["icq"];
				cmdStr+="',face="+Request["curface"];
			    cmdStr+=",icon="+Request["cicon"];
				cmdStr+=",url='"+Request["inurl"];
				cmdStr+="',mes='"+Request["ftext"].Replace("'","''");
				cmdStr+="',subj='"+Request["subject"];
				cmdStr+="' where number="+sID;
	OleDbCommand     cmdD  = new OleDbCommand(cmdStr, connD );

	connD.Open();
	cmdD.ExecuteNonQuery();
	connD.Close();

				SendFlag="1";
			  }
		    }
			}
	else{ 
		SendFlag="4";
	}
	Response.Write("&&SendFlag="+SendFlag);
%>