del_topic.asp

来自「中国网站网贴吧程序源码（ASP+ACCESS） 实现功能： 多级分类查找,可按多」· ASP 代码 · 共 131 行

<!--#include file="../conn/boardconn.asp"-->
<!--#include file="../style/sql.asp" -->
<!--#include file="../CHAR.INC"-->
<!--#include file="../function.asp"-->
<%
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%
fqys=request.servervariables("query_string") 
dim nothis(18) 
nothis(0)="net user" 
nothis(1)="xp_cmdshell" 
nothis(2)="/add" 
nothis(3)="exec%20master.dbo.xp_cmdshell" 
nothis(4)="net localgroup administrators" 
nothis(5)="select" 
nothis(6)="count" 
nothis(7)="asc" 
nothis(8)="char" 
nothis(9)="mid" 
nothis(10)="'" 
nothis(11)=":" 
nothis(12)="""" 
nothis(13)="insert" 
nothis(14)="delete" 
nothis(15)="drop" 
nothis(16)="truncate" 
nothis(17)="from" 
nothis(18)="%" 
errc=false 
for i= 0 to ubound(nothis) 
if instr(FQYs,nothis(i))<>0 then 
errc=true 
end if 
next 
if errc then 
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center><font face=Georgia,Tahoma size=2><u>友情提示：服务器禁止非法操作...</u></font></center>"
response.write "</td></tr></table></center>"
response.end 
end if 
%>
<%CheckAdmin1%>
<%
Dim Action,TopicID
Action=LCase(Request.QueryString("Action"))
TopicID=CInt(Request.QueryString("TopicID"))
If TopicID="" or not IsNumeric(TopicID) Then
	response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
	response.write "<tr><td style=font:9pt Verdana>"
	response.write "<center><font face=Georgia,Tahoma size=2>友情提示：服务器禁止非法操作...</font></center>"
	response.write "</td></tr></table></center>"
	Response.End
End If
SelectValue = LCase(Request.QueryString("SelectValue"))
Sql="select UserName from QiQiBoy_Topic_Disp where TopicID="&TopicID
Set Rs=Conn.execute(Sql)
UserName=Rs(0)
Select Case Action
Case "delete"
	Call DeleteTopic()
	Call Result(Action)
End select

'删除帖子
Sub DeleteTopic()
	Sql="Select ParentID from QiQiBoy_Topic_Disp where TopicID="&TopicID
	Set Rs=Conn.execute(Sql)
	If Rs(0)=0 then
		Sql="Update QiQiBoy_User_Disp set deletes=deletes+1 where UserName='"&UserName&"'"
		Conn.execute(Sql)
		Sql="Update QiQiBoy_User_Disp set Integral=Integral-3 where UserName='"&UserName&"'"
		Conn.execute(Sql)

		Sql="select RootID from QiQiBoy_Topic_Disp where TopicID="&cint(TopicID)
		Set Rs=Conn.execute(Sql)
		RootID=Rs(0)
		Sql="select count(RootID) from QiQiBoy_Topic_Disp where ParentID<>0 and RootID="&cint(RootID)
		Set Rs=Conn.execute(Sql)
		RootsID=Rs(0)

		Sql="Select BoardChild from QiQiBoy_Topic_Disp where TopicID="&cint(TopicID)
		Set Rs=Conn.execute(Sql)
		BoardChild=rs(0)
		Sql="Update QiQiBoy_Board_Disp set BoardTopics=BoardTopics-1 where BoardChild="&cint(BoardChild)
		Conn.execute(Sql)
		Sql="Update QiQiBoy_Board_Disp set BoardReplys=BoardReplys-'"&RootsID&"' where BoardChild="&cint(BoardChild)
		Conn.execute(Sql)

		Sql="Update QiQiBoy_Status_Disp set TotalTopics=TotalTopics-1 where StatusID=1"
		Conn.execute(Sql)
		Sql="Update QiQiBoy_Status_Disp set TotalReplys=TotalReplys-'"&RootsID&"' where StatusID=1"
		Conn.execute(Sql)

		Sql="Delete from QiQiBoy_Topic_Disp where TopicID="&cint(TopicID)
		Conn.execute(Sql)
		Sql="Delete from QiQiBoy_Topic_Disp where ParentID<>0 and RootID="&cint(RootID)
		Conn.execute(Sql)
	End if
		Img=trim(Request("file"))
		path="member_topic_upload_file"
		filepath=Server.MapPath(path)
		Set FObject=Server.CreateObject("Scripting.FileSystemObject")
		if Fobject.FileExists(filepath&"\"&Img) then
		Set afile=FObject.GetFile(""&filepath&""&"/"&""&Img&"")
		afile.Delete
		end if
End Sub

'管理结果显示
Sub Result(Stats)
%>
				<%
				Select Case Stats
				Case "delete"
					response.Write("<script>alert('友情提示!\n\n完成帖子删除操作!');history.back();</script>")
				End Select
				%>

<%
End Sub
%>