rpost_do.asp

9seek 留言本源代码5.0版

<!--#include file="conn.asp"-->
<!--#include file="connip.asp"-->
<!--#include file=const.asp -->
<!--#include file=md5.asp -->
<%

dim title,name,pass,email,qq,url,pic,nei,t,rt,yd,hf,jh,bl,male,face,icq,msn
dim rtid, rs, exec1, rs2, rs1, reID, reTime,isPrivate, foundErr
  
title=encodestr(Request.form("title"))
name=encodestr(Request.form("name"))
pass=encodestr(Request.form("pass"))
email=encodestr(Request.form("email"))
qq=encodestr(Request.form("qq"))
icq=encodestr(Request.form("icq"))
msn=encodestr(Request.form("msn"))
url=encodestr(Request.form("url"))
male=encodestr(Request.form("male"))
face=encodestr(Request.form("face"))
nei=replace(Request.form("nei"),"'","""")
pic=encodestr(Request.form("pic"))
rtid=encodestr(Request.form("rtid"))
isPrivate=encodestr(Request.form("isPrivate"))
bl=0

if isDate(request.cookies("gbook")("lastpost")) then
	if dateDiff("s",Cdate(request.cookies("gbook")("lastPost")),now)<=postLimit then
		session("error")="请不要灌水！！<br>"
		foundErr=true
	end if
end if
if len(title)<3 then
	session("error")="请认真填写留言标题！！<br>"
	foundErr=true
end if
if len(name)=0 and not theUser.reged then
	session("error")=session("error") & "请填写用户名！！<br>"
	foundErr=true
end if
if len(nei)<2 then
	session("error")=session("error") & "请认真填写留言内容！！<br>"
	foundErr=true
end if
if len(nei)>maxLength then
	session("error")=session("error") & "留言内容最多"& maxLength &"个字符，请减少你的留言内容！！<br>"
	foundErr=true
end if
if len(title)>40 then
	session("error")=session("error") & "留言标题不可以超过40个字符！！<br>"
	foundErr=true
end if
if len(name)>10 then
	session("error")=session("error") & "用户名不可以超过10个字符！！<br>"
	foundErr=true
end if

if foundErr then
	response.redirect("error.asp")
end if

if theUser.reged then
	name=theUser.name
	qq=theUser.qq
	icq=theUser.icq
	msn=theUser.msn
	email=theUser.email
	url=theUser.url
	if theUser.male then
		male="1"
	else
		male="0"
	end if
	face=theUser.face
	bl=1
elseif pass<>"" then
	pass=MD5(pass)
	exec1="select * from [user] where username='"&name&"'"
	Set RS = Server.CreateObject("ADODB.RecordSet") 
	rs.Open exec1, Conn, 1, 1
	if not rs.eof then
		if pass=rs("userpassword") then
				qq=rs("oicq")
				icq=rs("icq")
				msn=rs("msn")
				email=rs("useremail")
				url=rs("homepage")
				male=rs("sex")
				face=rs("GBface")
				rsclose()
				bl=1
		else
		   		rsclose()
				connclose()
				session("error")="保留用户密码帐号不对应！！！"
			response.redirect "error.asp"
		end if
	else
		rsclose()
		Set rs = Server.CreateObject("ADODB.Recordset")
		exec1="select top 1 * from [user]"
		rs.Open exec1,conn,1,2
		rs.addnew
		rs("username")=name
		rs("userpassword")=pass
		rs("useremail")=email
		rs("oicq")=qq
		rs("icq")=icq
		rs("msn")=msn
		rs("homepage")=url
		rs("sex")=male
		rs("GBface")=face
		rs("GBpostNum")=0
		rs("GBprivateNum")=0
		rs("AddDate")=dateAdd("h",timeDiff,now)
		rs.update
		rsclose()
		exec1="update GBconst set userNum=userNum+1"
		conn.execute(exec1)
	bl=1
	end if
end if


Set rs = Server.CreateObject("ADODB.Recordset")
exec1="select top 1 * from ly order by id desc"
rs.Open exec1,conn,1,2
	rs.addnew
	rs("name")=name
	rs("title")=title
	rs("email")=email
	rs("qq")=qq
	rs("icq")=icq
	rs("msn")=msn
	rs("male")=male
	rs("face")=face
	rs("url")=url
	rs("nei")=nei
	rs("t")=dateAdd("h",timeDiff,now)
	rs("retime")=dateAdd("h",timeDiff,now)
	rs("pic")=pic
	rs("bl")=bl
	rs("yd")=0
	rs("hf")=0
	rs("jh")=0
	rs("rt")=rtid
	rs("ip")=request.servervariables("remote_addr")
	rs("comefrom")=getFrom(request.servervariables("remote_addr"))
	if isPrivate="1" then
		rs("isPrivate")=1
	end if
	rs.update
	rs.requery
	reID=rs("id")
	reTime=rs("t")
	rs.close

exec1="select top 1 * from ly where id="& Cstr(rtid)
rs.open exec1,conn,1,3
if not (rs.eof and rs.bof) then
	rs("hf")=rs("hf")+1
	rs("reid")=reid
	rs("reTime")=dateAdd("h",timeDiff,now)
	rs.update
end if
rsclose()

if bl=1 then
	exec1="update [user] set GBpostNum=GBpostNum+1 where username='"& name &"'"
	conn.execute(exec1)
end if

connclose()

response.cookies("gbook")("lastPost")=now

if not theUser.reged then
	response.cookies("gbook")("username")=vbescape(name)
	response.cookies("gbook")("password")=pass
end if

session("url")="show.asp?id="&rtid
response.redirect "addok.asp"    
%>