📄 new.asp
字号:
<!--#include file="inc_common.asp"-->
<!--#include file="UBB.asp"-->
<%
'**************************************
'** new.asp
'**
'** 文件说明：写留言页面
'** 修改日期：2006-04-30
'** 作者：Howlion
'** Email：howlion@163.com
'**************************************
if lock="1" then
errinfo="<li>留言本已经被管理员锁定，您无法留言。"
call showError()
end if
select case Request.QueryString("act")
case "addnew"
call addnew()
case ""
pagename="写留言"
call bodySkin()
sub pageContent()
submitForm()
end sub
end select
if needSecurityCode=true then
session("SranmSecurityCode") = RndCode()
end if
function submitForm()
%>
<script src="UBB.js"></script>
<form action="?act=addnew" method="post" name="lw_form" id="lw_form" onsubmit="return Submitcheck()">
<%if notice<>"" then%>
<div id="notice"><%=UBBcode(notice,1)%></div>
<%end if%>
<div class="row">
<div class="row-left"><span class="red">***</span> 您的称呼：</div>
<div class="row-right"><input name="username" size="19" maxlength="80" value="<%=Request.Cookies("SranM_userinfo")("SranM_username")%>"></div>
</div>
<div class="row">
<div class="row-left">性别及头像：</div>
<div class="row-right">
男性：<img src="<%=userfacesFolder%>/small_1.gif" class="face"><input type="radio" value="1" name="userface" class="radio" checked="checked">
<img src="<%=userfacesFolder%>/small_2.gif" class="face"><input type="radio" value="2" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_3.gif" class="face"><input type="radio" value="3" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_4.gif" class="face"><input type="radio" value="4" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_5.gif" class="face"><input type="radio" value="5" name="userface" class="radio"><br />
女性：<img src="<%=userfacesFolder%>/small_6.gif" class="face"><input type="radio" value="6" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_7.gif" class="face"><input type="radio" value="7" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_8.gif" class="face"><input type="radio" value="8" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_9.gif" class="face"><input type="radio" value="9" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_10.gif" class="face"><input type="radio" value="10" name="userface" class="radio"><br />
中性：<img src="<%=userfacesFolder%>/small_11.gif" class="face"><input type="radio" value="11" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_12.gif" class="face"><input type="radio" value="12" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_13.gif" class="face"><input type="radio" value="13" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_14.gif" class="face"><input type="radio" value="14" name="userface" class="radio">
<img src="<%=userfacesFolder%>/small_15.gif" class="face"><input type="radio" value="15" name="userface" class="radio"> </div>
</div>
<div class="row">
<div class="row-left">网站：</div>
<div class="row-right">
<%dim myURL
if Request.Cookies("SranM_userinfo")("SranM_userURL") = "" then
myURL = "http://"
else
myURL = Request.Cookies("SranM_userinfo")("SranM_userURL")
end if%>
<input name="userURL" size="19" maxlength="200" value="<%=myURL%>">
</div>
</div>
<div class="row">
<div class="row-left">电子邮件：</div>
<div class="row-right">
<input name="usermail" size="19" maxlength="80" value="<%=Request.Cookies("SranM_userinfo")("SranM_usermail")%>">
</div>
</div>
<div class="row">
<div class="row-left">QQ号码：</div>
<div class="row-right">
<input name="userqq" size="19" maxlength="80" value="<%=Request.Cookies("SranM_userinfo")("SranM_userqq")%>">
</div>
</div>
<div class="row">
<div class="row-left">标题：</div>
<div class="row-right">
<input name="usertitle" size="40" maxlength="100">
</div>
</div>
<div class="row">
<div class="row-right">
<div class="row-right-graybg"><!--#include file="inc_UBB.asp"--></div>
</div>
</div>
<div class="row">
<div class="row-left"><span class="red">***</span> 正文：</div>
<div class="row-right">
<textarea cols="60" rows="12" name="usercontent" id="usercontent" title="Ctrl+Enter提交" onkeydown="ctlent()" onselect="storeCaret(this);" onclick="storeCaret(this);" onkeyup="storeCaret(this);textNum.innerText=this.value.length"></textarea><br />
<span class="noteText">当前字数：<span class="Highlight"><span id="textNum">0</span></span>，最大字数：<span class="Highlight"><%=maxnum%></span></span>
</div>
</div>
<%if UBBcfg_emot=1 then%>
<div class="row">
<div class="row-right">
<div class="row-right-graybg">
<%call getEmot()%>
</div>
</div>
</div>
<%end if%>
<div class="row">
<div class="row-right">
<input type="checkbox" name="whisper" id="whisper" value="1" /> <label for="whisper">悄悄话</label> 回复查看码（可不填）：<input name="replycode" size="20" maxlength="100" /><br />
<span class="noteText">回复查看码用于以后查看管理员对悄悄话的回复。
若不填，管理员将无法回复此悄悄话。</span>
</div>
</div>
<%if needSecurityCode=true then%>
<div class="row">
<div class="row-left"><span class="red">***</span> 验证码：</div>
<div class="row-right"><input name="SecurityCode" size="10" maxlength="4" value=""> <img src="security_code.asp" alt="验证码" /></div>
</div>
<%end if%>
<div class="row">
<div class="row-right"><br />
<input type="hidden" name="UBB_super" value="0">
<input type="submit" class="button" name="Submit" value="提 交">
<input type="reset" class="button" class="button" name="Submit2" value="清 除">
<input type="button" class="button" name="Preview" value="预览" onclick="openpreview()">
</div>
</div>
</form>
<form action="preview.asp" method="post" name="preview" target="preview_page" id="preview">
<input type="hidden" name="UBB_super" value>
<input type="hidden" name="usertitle" value>
<input type="hidden" name="usercontent" value>
</form>
<%
end function
sub addnew() '//////// 将留言加入数据库
dim servername1,servername2
servername1=Cstr(Request.ServerVariables("HTTP_REFERER"))
servername2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(servername1,8,len(servername2))<>servername2 then
errinfo="<li>非法的提交动作！</li>"
call showError()
end if
if session("postTime")<>"" and minute(NOW() - session("postTime")) < 1 and not(login) then
session("postTime")=NOW()
errinfo="<li>您的提交时间间隔过短，请一分钟后再次提交。</li>"
call showError() '//////// 此处是为了防止恶意的重复提交
end if
dim username,SecurityCode,xingbie,userface,userURL,usermail,userqq
dim usertitle,usercontent,whisper,checked,replycode
username=Trim(sql_filter(request.Form("username")))
SecurityCode=Trim(sql_filter(request.Form("SecurityCode")))
if request.Form("userface") < 6 then
xingbie=1
elseif request.Form("userface") < 11 then
xingbie=2
else
xingbie=3
end if
userface=sql_filter(request.Form("userface"))
if Trim(sql_filter(request.form("userURL")))="http://" then
userURL = ""
else
userURL=Trim(sql_filter(request.form("userURL")))
end if
usermail=Trim(sql_filter(request.form("usermail")))
userqq=Trim(sql_filter(request.form("userqq")))
usertitle=Trim(sql_filter(request.form("usertitle")))
usercontent=Rtrim(sql_filter(request.form("usercontent")))
if not request.form("whisper")="1" then
whisper=0
else
whisper=1
end if
replycode=sql_filter(Trim(request.form("replycode")))
Response.Cookies("SranM_userinfo")("SranM_username") = username
Response.Cookies("SranM_userinfo")("SranM_userURL") = userURL
Response.Cookies("SranM_userinfo")("SranM_usermail") = usermail
Response.Cookies("SranM_userinfo")("SranM_userqq") = userqq
Response.Cookies("SranM_userinfo").expires=date+365
if username="" then
errinfo=errinfo & "<li>未填写您的称呼</li>"
else
if len(username)>20 then errinfo=errinfo & "<li>过长的称呼</li>"
if (UCase(username)=UCase(name) or username="管理员") and not(login) then errinfo=errinfo & "<li>请勿使用管理员的称呼</li>"
end if
if SecurityCode <> session("SranmSecurityCode") and needSecurityCode=true then
errinfo=errinfo & "<li>验证码填写错误</li>"
end if
if len(usertitle)>50 then
errinfo=errinfo & "<li>过长的标题</li>"
end if
dim re
Set re=new RegExp
re.IgnoreCase =true
re.Global=True
re.Pattern="(\[(.[^\]]*)\])"
if Trim(re.Replace(Replace(request.form("usercontent"), CHR(13)&CHR(10), ""),""))="" then
errinfo=errinfo & "<li>未填写留言内容</li>"
elseif len(usercontent)>maxnum then
errinfo=errinfo & "<li>过长的留言内容</li>"
end if
if not adword="" then
dim alladword,i
alladword=split(adword,chr(13)&chr(10))
for i = lbound(alladword) to ubound(alladword)
if instr(UCase(usercontent & usertitle),UCase(trim(alladword(i))))>0 and trim(alladword(i))<>"" then
errinfo="<li>未知错误。</li>"
call showError()
response.end
end if
next
end if
If userURL<>"" then
dim isURL
re.Pattern="http://([\w-]+\.)+[\w-]+(/[\w- ./?%&=]*)?"
isURL=re.test(userURL)
if not isURL then
errinfo=errinfo & "<li>个人主页地址填写有误</li>"
elseif len(userURL)>200 then
errinfo=errinfo & "<li>过长的个人主页地址</li>"
end if
end if
If usermail<>"" then
dim isEmail
re.Pattern="^[\w-\.]{1,}\@([\da-zA-Z-]{1,}\.){1,}[\da-zA-Z-]{2,3}$"
isEmail=re.test(usermail)
if not isEmail then
errinfo=errinfo & "<li>电子邮件地址填写有误</li>"
elseif len(usermail)>100 then
errinfo=errinfo & "<li>过长的电子邮件地址</li>"
end if
end if
set re=Nothing
if trim(userqq)<>"" then
if not(isnumeric(userqq)) then
errinfo=errinfo & "<li>QQ号码填写有误</li>"
elseif len(userqq)>10 then
errinfo=errinfo & "<li>过长的QQ号码</li>"
end if
end if
if len(replycode)>45 then
errinfo=errinfo & "<li>过长的回复查看码</li>"
end if
call showError()
if needcheck=0 or whisper=1 then
checked=1
else
checked=0
end if
Set rs= Server.CreateObject("ADODB.Recordset")
sql="select * from [topic]"
rs.open sql,conn,3,2
rs.addnew
rs("username")=username
rs("xingbie")=xingbie
rs("userface")=userface
rs("userURL")=userURL
rs("usermail")=usermail
rs("userqq")=userqq
rs("usertime")=now()
rs("usertitle")=usertitle
rs("usercontent")=usercontent
rs("whisper")=whisper
rs("replycode")=replycode
rs("top")="0"
rs("reply")="0"
rs("ip")=user_ip
rs("checked")=checked
rs.update
rs.close
session("postTime")=NOW()
if checked=0 then
response.write"<script>alert('留言已成功提交，但需要通过审核后才会显示。');location='index.asp'</script>"
else
if whisper=1 then
if replycode="" then
response.write"<script>alert('悄悄话留言已成功提交，但您没有填写回复查看码，管理员将无法回复您的发言，您也无法查看回复。');location='index.asp'</script>"
else
response.write"<script>alert('悄悄话留言已成功提交，您可以在管理员回复后，通过输入回复查看码，查看回复内容。');location='index.asp'</script>"
end if
else
Response.Redirect "index.asp"
Response.Flush
end if
end if
end sub
%>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -