delzhai.asp

这是一个非常好的留言版程序

<!--#include file=conn.asp--> 
<!--#include file=char.asp--> 

<%
id=cint(request.querystring("id"))
userid=HTMLEncode(request.querystring("userid"))
set rs=conn.execute("select * from zhai where UserID='"&userid&"' and id="&id)

if rs.eof then
	response.write"<SCRIPT language=JavaScript>alert('对不起，请不要非法删除她人的数据，您的IP已被我们记录，请返回！');"
	response.write"javascript:history.go(-1);</SCRIPT>"
	response.end
end if

filename="article/"&trim(rs("filepath"))&"/"&trim(rs("htmurl"))

	Set fso = Server.CreateObject("Scripting.FileSystemObject")   
	if fso.FileExists(server.mappath(filename)) then   
		fso.DeleteFile(server.mappath(filename))
	end if
	
	sql="delete from zhai where id="&id
	conn.execute(sql)
	
	sql="delete from visit where ZhaiID="&request("id")
	conn.execute(sql)
	
	sql="update myuser set ZhaiNum=ZhaiNum-1 where UserID='"&userid&"'"
	set rsupdate=conn.execute(sql)
	
	sql="delete from visit where ZhaiID="&id
	conn.execute(sql)
	
	rs.close
	set rs=nothing
	conn.close
	set conn=nothing
	
	response.redirect "myzhai.asp"
	response.end

%>