editsave.asp

不是我做的一个留言板

<%@ language=vbscript %>
<!--#include file="conn.inc"-->
<%
if session("username")="" then
response.redirect "log.asp"
end if
lname=session("username")
name=trim(request.form("name"))
sex=trim(request.form("sex"))
phone=trim(request.form("phone"))
oicq=trim(request.form("oicq"))
addr=trim(request.form("addr"))
username=trim(request.form("nicname"))
web=trim(request.form("web"))
work=trim(request.form("work"))
waihao=trim(request.form("waihao"))
email=trim(request.form("email"))
self=trim(request.form("self"))
topic=trim(request.form("topic"))
js=trim(request.form("js"))
if name=""then '--------------判断名字是否为空
		response.write"<script language='javascript'>" 
		 response.write"alert('你为什么不留下你的姓名呢？');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(name)>4 then '--------------判断名字长度
		response.write"<script language='javascript'>" 
		 response.write"alert('姓名请不要超过4个字！');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(waihao)>10 then '--------------判断外号长度
		response.write"<script language='javascript'>" 
		 response.write"alert('外号请不要超过10个字');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if sex="" then '--------------
		response.write"<script language='javascript'>" 
		 response.write"alert('你难道不分性别？');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(sex)>1 then '--------------
		response.write"<script language='javascript'>" 
		 response.write"alert('性别请不要超过2个字！你填男或女就对了！');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if oicq="没填" then
oicq="0"
end if
if isnumeric(oicq)=false then '----oicq判断
response.write"<script language='javascript'>" 
		 response.write"alert('oicq不能为空且只能为数字！');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if oicq="0" then
oicq="没填"
end if
if len(oicq)>10 then '--------------判断oicq长度
		response.write"<script language='javascript'>" 
		 response.write"alert('这么长oicq号？');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if

if addr="" then  '--------------判断地址是否为空
         response.write"<script language='javascript'>" 
		 response.write"alert('你为什么不留下你的地址呢？');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(addr)>25 then '--------------判断地址长度
		response.write"<script language='javascript'>" 
		 response.write"alert('地址请不要超过25个字符！');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if username="" then  '--------------判断地址是否为空
         response.write"<script language='javascript'>" 
		 response.write"alert('呢称不要为空！');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(username)>15 then '--------------判断地址长度
		response.write"<script language='javascript'>" 
		 response.write"alert('呢称请不要超过15个字符！');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(work)>25 then '--------------判断工作单位长度
		response.write"<script language='javascript'>" 
		 response.write"alert('你的公司名字也太长了吧，简写！不要超过25个字');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(self)>120 then '--------------判断自我介绍长度
		response.write"<script language='javascript'>" 
		 response.write"alert('自我介绍请不要超过120个字');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(topic)>20 then '--------------判断自我介绍长度
		response.write"<script language='javascript'>" 
		 response.write"alert('图片主题请不要超过20个字');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
if len(js)>200 then '--------------判断自我介绍长度
		response.write"<script language='javascript'>" 
		 response.write"alert('图片介绍请不要超过200个字');" 
		 response.write"history.go(-1);"
		 response.write"</script>" 
		 response.end
end if
sql = "select * from mis where username='"&lname&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,3,3
rs("name")=name
rs("sex")=sex
rs("oicq")=oicq
rs("phone")=phone
rs("addr")=addr
rs("time")=now()
rs("ip")=request.servervariables("remote_addr")
rs("username")=username
rs("email")=email
rs("waihao")=waihao
rs("work")=work
rs("self")=self
rs("web")=web
rs.update

js=server.htmlencode(js)
  set rs1=server.CreateObject("adodb.recordset")
  sql1="SELECT * FROM imgdata WHERE user ='"&lname&"'"
  rs1.open sql1,conn,3,3
  if not rs1.eof then
rs1("topic")=topic
rs1("js")=js
rs1.update
rs1.close
end if
conn.close
response.redirect "editok.asp?id="&request("id")
response.end
%>