writepost.asp

学校用的班级网站

<!--#include file="inc/db.inc"-->
<%
Function Sqlstr(data)
 	sqlstr=Replace(data,"'","''")
End Function

userid=session("myuserid")
geter=request.form("geter")
set rs=Server.CreateObject ("ADODB.RECORDSET")
mysql="select truename from txluser where userid='"&geter&"'"
rs.open mysql,conn,1,1
truegeter=rs("truename")
set rs=nothing

title=sqlstr(request.form("title"))
content=sqlstr(request.form("content"))
content=replace(content,"<","〈",1)
content=replace(content,">","〉",1)
content=replace(content,chr(13)&chr(10),"<br>",1)
flag=request("flag")
if flag="reg" then
	set rs=Server.CreateObject ("ADODB.RECORDSET")
	rs.open "loveword",conn,2,2,adCmdTable
	rs.addnew
	rs("userid")=userid
	rs("geter")=geter
	rs("title")=title
	rs("content")=content
	rs("posttime")=now
	rs("writer")=request("writer")
	rs("truegeter")=truegeter
	rs.update
	rs.close%>
<script language="Javascript">
	alert('填写成功，按确定关闭本窗口！');
	opener.location.reload();
	window.close();
</Script>
<%else
set rs=Server.CreateObject ("ADODB.RECORDSET")
sql="select * from loveword where id="&flag
	rs.open sql,conn,1,3
	rs("userid")=userid
	rs("geter")=geter
	rs("title")=title
	rs("content")=content
	rs("posttime")=now
	rs("writer")=request("writer")
	rs("truegeter")=truegeter
	rs.update
	rs.close
%>
<script language="Javascript">
	alert('修改成功，按确定关闭本窗口！');
	opener.location.reload();
	window.close();
</Script>
<%end if%>