replysave.asp

☆☆网吧客户留言簿☆☆ 管理用户名和密码都是:admin 演示：http://www39.websamba.com/51rose/netbarbook/

<!-- #include file="opendb.asp"-->
<%
  if Trim(session("mangflag"))="" or Trim(session("timeflag"))="" then
    Response.redirect("noadmto.asp")
  end if
%>
<%
'------------------- 解决留言不会换行的-----------------------
  function HTMLEncode(fString)
  if not isnull(fString) then
  fString = replace(fString, ">", "&gt;")
  fString = replace(fString, "<", "&lt;")

  fString = Replace(fString, CHR(32), "&nbsp;")
  fString = Replace(fString, CHR(9), "&nbsp;")
  fString = Replace(fString, CHR(34), "&quot;")
  fString = Replace(fString, CHR(39), "&#39;")
  fString = Replace(fString, CHR(10) & CHR(10), "</P><P> ")
  fString = Replace(fString, CHR(10), "<BR> ")
  HTMLEncode = fString
  end if
  end function
%>
<%
  'if Trim(Request.Form("")
%>
<%
  if Trim(Request.Form("Recontent"))="" then
%>
<%
    SQLT = "Delete From Reply Where GuestID=" & Trim(Request("ID"))
	Conn.Execute(SQLT)
%>	
<%
  else
    recontent=HtmlEncode(Request.form("Recontent"))
	
    set Rs=Server.CreateObject("ADODB.Recordset")
    sqlstrb="select * from reply Where GuestID=" & Trim(Request("ID"))
    Rs.open sqlstrb,conn,1,3
%>
<%
    if not Rs.eof then
	  Rs("Content")=recontent
	  Rs.update
	else
	  Rs.addnew
	    Rs("GuestID")=Trim(Request("ID"))
	    Rs("Date")=Date()
		Rs("Time")=Time()
	    Rs("Content")=recontent
	  Rs.update
	  SQL = "Update Guest Set Reply=1 Where ID=" & Request("ID")
	  Conn.Execute(SQL)
	End if
	if  Request.Form("NoView")=1 then
	  SQL2 = "Update Guest Set ReNoView=True Where ID=" & Request("ID")
	  Conn.Execute(SQL2)
	else
	  SQL2 = "Update Guest Set ReNoView=False Where ID=" & Request("ID")
	  Conn.Execute(SQL2)
	end if	  
%>
<%
  End if
  conn.close
  set conn=nothing
%>
<% 
  urlstr="state.asp?state=replysuc&pn="+Trim(Request("pn"))
  response.Redirect urlstr
%>