rj_save.asp

购物系统(本版为正式商业版

<!--
┌─9911.com.cn────────────┐
│  动感购物 WWW.9911.com.cn 版权所有  │
│  动感购物2005Vb  联系：[e-mail] │
└───────────9911.com.cn──┘
-->
<!--#include file="../conn.asp"-->
<!--#include file="../webconfig.asp"-->
<!--#include file="../fuction.asp" -->
<%function HTMLEncode2(fString)
    fString = replace(fString, ">", "&gt;")
    fString = replace(fString, "<", "&lt;")

    fString = Replace(fString, CHR(32), "<I></I>&nbsp;")
    fString = Replace(fString, CHR(9), "&nbsp;")
    fString = Replace(fString, CHR(34), "&quot;")
    fString = Replace(fString, CHR(39), "&#39;")
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P> ")
    fString = Replace(fString, CHR(10), "<BR> ")
	HTMLEncode2 = fString
end function%>


<%if info<>1 then
response.Write "<script language='javascript'>alert('对不起，页面调用错误！');history.go(-1);</script>"
response.End
end if
%>

<%
if nosql(request("action"))<>"del" then
if request("rjname")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写主题！');history.go(-1);</script>"
response.End
end if
if request("rjuser")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写作者！');history.go(-1);</script>"
response.End
end if
if request("rjnr")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写日记内容！');history.go(-1);</script>"
response.End
end if
end if

action=nosql(request("action"))
id=nosql(request("id"))
select case action
case "add"
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from [shop_rj]",conn,1,3
rs.addnew
rs("rjname")=nosql(trim(request("rjname")))
rs("rjuser")=nosql(trim(request("rjuser")))
rs("classid")=nosql(trim(request("classid")))
rs("rjnr")=nosql(HTMLEncode2(trim(request("rjnr"))))
rs("rjdate")=now()
rs("rjtj")=0
rs("rjhot")=0
rs.update
rs.close
set rs=nothing
response.write "<script LANGUAGE='javascript'>alert('添加成功！');history.go(-1);</script>"
response.End
case "save"
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from [shop_rj] where rjuser='"&checkFFSQLStr(session("username"))&"' and id="&id&" ",conn,1,3
rs("rjname")=nosql(trim(request("rjname")))
rs("rjuser")=nosql(trim(request("rjuser")))
rs("rjnr")=HTMLEncode2(trim(request("rjnr")))
'rs("classid")=nosql(trim(request("classid")))
rs("rjdate")=now()
rs.update
rs.close
set rs=nothing
response.write "<script LANGUAGE='javascript'>alert('修改成功！');history.go(-1);</script>"
response.End
case "del"
id=request("id")
set rs=server.createobject("adodb.connection")
conn.execute "delete from shop_rj where  rjuser='"&nosql(session("username"))&"' and id="& id
conn.close
response.write "<script LANGUAGE='javascript'>alert('修改成功！');history.go(-1);</script>"
response.End
end select
%>