getpost.asp

本代码是一个个人主页

<!--#include file="conn.asp"-->
<!--#include file="common.asp"-->
<!--#include file="include/function.asp"-->
<!--#include file="md5.asp"-->
<%
action=request("action")
group=request.form("group")
blog_rzclass=request.cookies("blog_rzclass")
id=request("id")
blogid=request("blogid")
ubb=request("ubb")
checkbadstr(blogid)
CheckBadStr(action)
CheckBadStr(group)
CheckBadStr(id)

'鍙戣〃鏃ュ織/////////////////////////////////////////
set rs3=server.createobject("adodb.recordset")
sql="select basic_mastername from blog_basic where id=1"
rs3.open sql,db

if action="add" then
if request.form("zd")="" then
  top=0
else
  top=request.form("zd")
end if
if request.form("gk")="" then
  gk=0
else
  gk=request.form("gk")
end if
if request.form("pl")="" then
  nopl=0
else
  nopl=request.form("pl")
end If
thistime=Now()
log_year=CInt(Year(thistime))
log_month=CInt(Month(thistime))
log_day=CInt(Day(thistime))
set rs2=server.createobject("adodb.recordset")
sql="select id from blog_class where class_name='"&group&"'"
rs2.open sql,db
set rs=server.createobject("adodb.recordset")
rs.open "blog_content",db,1,3
rs.addnew
rs("content_title")=request.form("title")
rs("content_content")=request.form("content")
rs("content_author")=rs3("basic_mastername")
rs("content_groupid")=rs2("id")
rs("content_group")=request.form("group")
rs("content_weather")=request.Form("weather")
rs("content_tags")=request.Form("content_tags")
rs("content_top")=top
rs("content_gk")=gk
rs("content_nopl")=nopl
rs("content_cf")=request.form("comefrom")
rs("content_cfaddress")=request.form("cfaddress")
rs("content_date")=date()
rs("content_time")=time()
rs("content_year")=log_year
rs("content_month")=log_month
rs("content_day")=log_day
rs("content_ubb")=ubb
rs.update
rs.close
set rs=Nothing

set rs4=server.createobject("adodb.recordset")
sql="update blog_class set class_rznum=class_rznum+1 where class_name='"&group&"'"
rs4.open sql,db,1,3
set rs4=Nothing

set rs5=server.createobject("adodb.recordset")
sql="update blog_basic set basic_rznum=basic_rznum+1 where id=1"
rs5.open sql,db,1,3
set rs5=Nothing

if request.form("content_tags")<>"" then
  tags=split(request.form("content_tags"),",")
  maxtags=ubound(tags)
  set rs=server.createobject("adodb.recordset")
  for tagsnum=0 to maxtags
	sql="select tags_name from blog_tags where tags_name='"&tags(tagsnum)&"'"
	rs.open sql,db
	if rs.eof then
	  set rs3=server.createobject("adodb.recordset")
	  rs3.open "blog_tags",db,1,3
	  rs3.addnew
	  rs3("tags_name")=tags(tagsnum)
	  rs3.update
	  rs3.close
	  set rs3=nothing
	end if
  next
  rs.close
  set rs=nothing
end If
blog_tags(2)
blog_class(2)
recentarticles(2)
response.write reinfo("鎴愬姛浜