rjpinglun.asp

购物系统(本版为正式商业版

<!--
┌─9911.com.cn────────────┐
│  动感购物 WWW.9911.com.cn 版权所有  │
│  动感购物2005Vb  联系：[e-mail] │
└───────────9911.com.cn──┘
-->
<!--#include file="../conn.asp"-->
<!--#include file="../webconfig.asp"-->
<!--#include file="../fuction.asp"-->
<%function HTMLEncode2(fString)
    fString = replace(fString, ">", "&gt;")
    fString = replace(fString, "<", "&lt;")

    fString = Replace(fString, CHR(32), "<I></I>&nbsp;")
    fString = Replace(fString, CHR(9), "&nbsp;")
    fString = Replace(fString, CHR(34), "&quot;")
    fString = Replace(fString, CHR(39), "&#39;")
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P> ")
    fString = Replace(fString, CHR(10), "<BR> ")
	HTMLEncode2 = fString
end function%>
<%dim action,rjid
action=nosql(request("action"))
rjid=nosql(request("id"))
if action="add" then
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from shop_rjpinglun",conn,1,3
rs.addnew
rs("rjid")=rjid
rs("pingji")=nosql(request("pingji"))
rs("pinglunname")=HTMLEncode2(trim(request("pinglunname")))
rs("pingluntitle")=HTMLEncode2(trim(request("pingluntitle")))
rs("pingluncontent")=HTMLEncode2(trim(request("pingluncontent")))
rs("ip")=Request.servervariables("REMOTE_ADDR")
rs("pinglundate")=now()
rs.update
rs.close
set rs=nothing
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from shop_rj where id="&rjid,conn,1,3
rs("pingji")=rs("pingji")+1
rs("pingjizong")=rs("pingjizong")+request("pingji")
rs.update
rs.close
set rs=nothing
response.write "<script LANGUAGE='javascript'>alert('你的评论已经成功提交，请返回！');history.go(-1);</script>"
response.End
else
set rs=server.createobject("adodb.connection")
conn.execute "delete from shop_rjpinglun where pinglunid="& rjid
conn.close
response.write "<script LANGUAGE='javascript'>alert('删除成功，请返回！');history.go(-1);</script>"
response.End
end if
%>