bbs_sadd.asp

台讯企业全站管理系统V2006 供下载时经过了严格的测试

<%@ LANGUAGE=VBScript CodePage=936%>
<!--#include file="Inc/Const.asp"-->
<!--#include file="Inc/System.asp"-->

<%
'***********************************************************************************
' 产品名称：台讯企业全站管理系统（V2006简体中文版）
' 程序开发：HECHENn（QQ：34103037　Emial：[e-mail]）
' Copyright 2006 txcodes.com - All Rights Reserved. 
'***********************************************************************************
IF instr(Web_Const(79),VisitorsIp) THEN
error_title="对不起，您的IP已被限制发表帖子！"
Call Page_check(3,0)
End IF
	Dim replaceall,Bbs_Title,Bbs_Content,replacestb,Bbs_Add,WebaddTime
Select Case Action
	Case "addsave"
		Set Rs=server.createobject("adodb.recordset")
		Sql="Select * from Tx_Bbs where Bbs_Add='" & Session("Loginuser") & "' order by Bbs_Date desc"
		Rs.open Sql,Conn,1,1
			IF Rs.RecordCount<>0 THEN
				IF DateDiff("s",Rs("Bbs_Date"),Now())<int(Web_Const(81)) THEN
					WebaddTime=1
				End IF
			End IF
		Rs.Close
		Set Rs=Nothing
        IF WebaddTime=1 THEN
            error_title="对不起，本站限制每次发帖时间间隔为" & Web_Const(81) & "秒！"
            founderr=True
        ElseIF int(Request.form("B_ClassId"))=0 THEN
		    IF trim(Request.form("B_Title"))="" THEN
                error_title="对不起，请输入帖子主题！"
                founderr=True
			End IF
		ElseIF Request.form("Content")="" THEN
            error_title="对不起，请输入帖子内容！"
            founderr=True
		ElseIF len(nohtml(Request.form("Content")))>int(Web_Const(82)) THEN
            error_title="对不起，帖子内容不能超过" & Web_Const(82) & "个字！"
            founderr=True
		End IF
        IF founderr=true THEN
	   	    Call Page_check(3,0)
		Else
            Set Rs=server.createobject("adodb.recordset")
            Sql="Select * from Tx_bbs"
            Rs.open Sql,Conn,1,3
	        Rs.AddNew
	            Rs("Bbs_Board")=Id
				IF int(Request.form("B_ClassId"))=0 THEN
	                Rs("Bbs_ClassId")=Rs("Bbs_Id")
				Else
	                Rs("Bbs_ClassId")=int(Request.form("B_ClassId"))
				End IF
				IF Web_Const(78)=1 THEN
			        Rs("Bbs_Flag")=int(Loginuser_Flag(10))
				Else
			        Rs("Bbs_Flag")=Web_Const(78)
				End IF
	            Rs("Bbs_Date")=Now()
	            Rs("Bbs_Count")=1
	            Rs("Bbs_Signs")=Request.form("B_Signs")
	            Rs("Bbs_Face")=Request.form("bbs_face")
	            Rs("Bbs_Add")=Session("Loginuser")
	            Rs("Bbs_Ip")=VisitorsIp
	            Rs("Bbs_Ress")=VisitorsRess
	            Rs("Bbs_UserId")=Loginuser_Id
	            Bbs_Title=trim(Request.form("B_Title"))
	            Bbs_Content=Request.form("Content")
			    replaceall=Web_Const(80)
                replaceall=split(replaceall,",")
                For i=0 To ubound(replaceall)
				    For intTemp=0 To len(replaceall(i))-1
				        replacestb=replacestb & "*"
				    Next
			        Bbs_Title=replace(Bbs_Title,replaceall(i),replacestb)
			        Bbs_Content=replace(Bbs_Content,replaceall(i),replacestb)
				    replacestb=""
			    Next
				Rs("Bbs_Title")=checkfSQLStr(Bbs_Title)
				Rs("Bbs_Content")=checkfSQLStr(Bbs_Content)
	        Rs.UpDate
		    ToHistory="bbs_list.asp?Id=" & Rs("Bbs_ClassId")
	        Rs.Close
	        Set Rs=Nothing
		    IF Web_Const(78)=0 THEN
		        saveok="，请等待管理员审核"
		    End IF
		    IF Request.form("B_re")="re" THEN
		        saveok="您已经成功回复一个帖子" & saveok & "！"
			End IF
			IF Request.form("B_re")="" THEN
		        saveok="您已经成功发表一个新帖子" & saveok & "！"
			End IF
	        Call Form_Saveok()
		End IF
    Case "editsave"
	    IF Request.form("Content")="" THEN
            error_title="对不起，请输入帖子内容？"
            founderr=True
		ElseIF len(nohtml(Request.form("Content")))>Web_Const(82) THEN
            error_title="对不起，帖子内容不能超过" & Web_Const(82) & "个字！"
            founderr=True
		End IF
        IF founderr=true THEN
	   	    Call Page_check(3,0)
		Else
            Set Rs_x=server.createobject("adodb.recordset")
            Sql="Select * from Tx_Bbs Where Bbs_Id=" & Id
            Rs_x.open Sql,Conn,1,3
			    Rs_x("Bbs_Flag")=Web_Const(78)
				Rs_x("Bbs_Signs")=Request.form("B_Signs")
				Rs_x("Bbs_Face")=Request.form("bbs_face")
	            Bbs_Title=trim(Request.form("B_Title"))
	            Bbs_Content=Request.form("Content")
			    replaceall=Web_Const(80)
                replaceall=split(replaceall,",")
                For i=0 To ubound(replaceall)
				    For intTemp=0 To len(replaceall(i))-1
				        replacestb=replacestb & "*"
				    Next
			        Bbs_Title=replace(Bbs_Title,replaceall(i),replacestb)
			        Bbs_Content=replace(Bbs_Content,replaceall(i),replacestb)
				    replacestb=""
			    Next
			    IF checkfSQLStr(Bbs_Title)<>"" THEN
				    Rs_x("Bbs_Title")=checkfSQLStr(Bbs_Title)
				End IF
				Rs_x("Bbs_Content")=checkfSQLStr(Bbs_Content)
			Rs_x.UpDate
			ToHistory="bbs_list.asp?Id=" & Rs_x("Bbs_ClassId")
			Rs_x.Close
			Set Rs_x=Nothing
		    IF Web_Const(78)=0 THEN
		        saveok="，请等待管理员审核"
		    End IF
		    saveok="您已经成功编辑了一个帖子" & saveok & "！"
	        Call Form_Saveok()
	    End IF
	Case "Top"
        Set Rs=server.createobject("adodb.recordset")
        Sql="Select * from Tx_bbs where Bbs_Id=" & Id
        Rs.open Sql,Conn,1,3
		    IF Rs("Bbs_Top")=1 THEN
			    Rs("Bbs_Top")=0
				saveok="帖子已取消固顶！"
			Else
			    Rs("Bbs_Top")=1
				saveok="帖子已设置固顶！"
			End IF
		Rs.UpDate
		Rs.Close
		Set Rs=Nothing
		ToHistory=Request.servervariables("http_referer")
		Call Form_Saveok()
	Case "Lock"
        Set Rs=server.createobject("adodb.recordset")
        Sql="Select * from Tx_bbs where Bbs_Id=" & Id
        Rs.open Sql,Conn,1,3
		    IF Rs("Bbs_Lock")=1 THEN
			    Rs("Bbs_Lock")=0
				saveok="帖子已解除屏蔽！"
			Else
			    Rs("Bbs_Lock")=1
				saveok="帖子已屏蔽！"
			End IF
		Rs.UpDate
		Rs.Close
		Set Rs=Nothing
		ToHistory=Request.servervariables("http_referer")
		Call Form_Saveok()
	Case "Del"
	Dim DelBbs,DelClassId
        Set Rs=server.createobject("adodb.recordset")
        Sql="Select * from Tx_bbs where Bbs_Id=" & Id
        Rs.open Sql,Conn,1,1
		    IF Rs("Bbs_Id")=Rs("Bbs_ClassId") THEN
			    DelClassId=Rs("Bbs_Board")
		        DelBbs=1
			Else
		        DelBbs=0
			End IF
		Rs.Close
		Set Rs=Nothing
		IF DelBbs=1 THEN
	        Conn.execute "Delete From Tx_Bbs Where Bbs_ClassId=" & Id
		    ToHistory="bbs_class.asp?Id=" & DelClassId
		Else
	        Conn.execute "Delete From Tx_Bbs Where Bbs_Id=" & Id
		    ToHistory=Request.servervariables("http_referer")
		End IF
		saveok="删除成功！"
		Call Form_Saveok()
    End Select
    Call CloseConn()
    %>