save.asp

购物系统(本版为正式商业版

<!--#include file="conn.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="../fuction.asp"-->
<% if session("username")=empty then
response.redirect "login.asp"
end if
bid=nosql(int(request.querystring("bid")))
title=nosql(trim(Replace(Request.Form("title"),vbcrlf," ")))
title=server.htmlencode(title)
faceimg=nosql(trim(request.form("faceimg")))
body=nosql(ContentEncode(request.form("body")))
username=nosql(session("username"))
 
if len(title)<1 then
response.write"<script language='javascript'>alert('对不起，帖子主题不能小于一个字符')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if

if len(body)<1  then
response.write"<script language='javascript'>alert('对不起，内容不能小于一个字符')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if

ls=session("lasttime")
if ls+1/8640>now() then
response.write"<script language='javascript'>alert('请不要重复提交帖子')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if

set rs=server.CreateObject("adodb.recordset")
sql="select * from book"
rs.open sql,conn,1,3
rs.addnew
rs("title")=title
rs("body")=body
rs("bid")=bid
rs("username")=username
rs("faceimg")=faceimg
rs("type")=0
rs("fid")=0
rs("hits")=0
rs("reply")=0
rs("wdate")=now()
rs("ldate")=now()


'投票处理程序
if Request.form("vote")<>"" then
vote=Request.form("vote")
if instr(vote,"|") > 0 then error("<li>投票选项中不能含有“|”字符")
vote_title=split(vote,chr(13)&chr(10))
j=0
for i = 0 to ubound(vote_title)
if not (vote_title(i)="" or vote_title(i)=" ") then
allpolltopic=""&allpolltopic&""&vote_title(i)&"|"
j=j+1
end if
next

for y = 1 to j
votenum=""&votenum&"0|"
next
rs("vote_title")=server.htmlencode(allpolltopic)
rs("vote_body")=votenum
rs("vote_dx")=Request.form("vote_dx")
end if




rs.update
id=rs("id")
rs.close
set rs=nothing
conn.execute("update [board] set lasttopic='<a href=Show.asp?id="&id&">"&left(title,15)&"</a>',lastname='"&username&"',lasttime='"&now()&"' where bid="&bid&"")
conn.execute("update [info] set alltopic=alltopic+1")
conn.execute("update [shop_user] set topic=topic+1 where username='"&username&"'")
response.redirect "list.asp?bid="&bid
%>