add.asp

商品订单管理：商品分类管理 添加与修改商品 管理订单 投诉订单 反馈信息 商品留言管理 管理网站用户：管理用户 管理后台管理员 新闻公告管理：新闻添加（支持图片新闻） 修改删除 首页公告设置 网站常规

<!--#INCLUDE FILE="conn.asp"-->
<link rel="stylesheet" type="text/css" href="img/css.css">
<%
function htmlencode2(str)
    dim result
    dim l
    if isNULL(str) then 
       htmlencode2=""
       exit function
    end if
    l=len(str)
    result=""
	dim i
	for i = 1 to l
	    select case mid(str,i,1)
	           case "<"
	                result=result+"&lt;"
	           case ">"
	                result=result+"&gt;"
              case chr(13)
	                result=result+"<br>"
	           case chr(34)
	                result=result+"&quot;"
	           case "&"
	                result=result+"&amp;"
              case chr(32)	           
	                'result=result+"&nbsp;"
	                if i+1<=l and i-1>0 then
	                   if mid(str,i+1,1)=chr(32) or mid(str,i+1,1)=chr(9) or mid(str,i-1,1)=chr(32) or mid(str,i-1,1)=chr(9)  then	                      
	                      result=result+"&nbsp;"
	                   else
	                      result=result+" "
	                   end if
	                else
	                   result=result+"&nbsp;"	                    
	                end if
	           case chr(9)
	                result=result+"    "
	           case else
	                result=result+mid(str,i,1)
         end select
       next 
       htmlencode2=result
   end function
%>

<%
	dim title,body,name,email
	title=request.form("title")
	body=htmlencode2(request.form("body"))
	name=request.form("name")
	email=request.form("email")
	Dim Sql,sValues
	Sql = "Insert into guest(name"
	sValues = "values('" & name & "'"
	Sql = Sql & ",title"
	sValues = sValues & ",'" & title & "'"
	If body<>"" Then
		Sql = Sql & ",body"
		sValues = sValues & ",'" & body & "'"
	End If
	If email<>"" Then
		Sql = Sql & ",email"
		sValues = sValues & ",'" & email & "'"
	End If
	Sql = Sql & ",submit_date"
	sValues = sValues & ",'" & date & "'"
	Sql = Sql & ") " & sValues & ")"
	CONN.Execute(Sql)
	CONN.close
	response.write "<font color=ff0000>Thank you for your advice!<br><a href=# onClick=history.go(-1)>Back</a></font>"
%>