cret.asp

台讯企业全站管理系统V2006 供下载时经过了严格的测试

<%@ LANGUAGE=VBScript CodePage=936%>
<!--#include file="Inc/Const.asp"-->
<!--#include file="Inc/System.asp"-->

<%
'***********************************************************************************
' 产品名称：台讯企业全站管理系统（V2006简体中文版）
' 程序开发：HECHENn（QQ：34103037　Emial：[e-mail]）
' Copyright 2006 txcodes.com - All Rights Reserved. 
'***********************************************************************************

	IF int(Web_Const(86))=0 or int(Web_Const(87))=0 or int(Loginuser_Flag(11))=0 THEN
        IF Loginuser_GroudId=0 THEN
            error_title="对不起，请先登陆，如果您不是我们的会员，请先注册！"
        Else
            error_title="对不起，论坛已禁止发表评论！"
        End IF
        Call Page_check(3,0)
	End IF
    IF instr(Web_Const(91),VisitorsIp) THEN
        error_title="对不起，您的IP已被限制发表评论！"
        Call Page_check(3,0)
    End IF
IF Action="cretsave" THEN
    if trim(request.form("C_Name"))="" And Session("Loginuser")="" THEN
        Errorst="对不起，请问您怎么称呼？"
        founderr=True
    ElseIF len(trim(request.form("C_Content")))>int(Web_Const(90)) THEN
        Errorst="对不起，留言内容不能超过" & Web_Const(90) & "个字！"
        founderr=True
    End IF
    IF founderr=True THEN
	    Call Form_Error()
    Else
	Dim replaceall,replacestr
        Set Rs_c=server.Createobject("Adodb.Recordset")
        Sql="Select * from Tx_Cret"
        Rs_c.open Sql,Conn,1,3
		Rs_c.AddNew
			Cret_Content=trim(request.form("C_Content"))
			Cret_AddName=trim(request.form("C_Name"))
            Rs_c("Cret_Lin")=request.form("Cret_Li")
			replaceall=Web_Const(89)
            replaceall=split(replaceall,",")
            For i=0 To ubound(replaceall)
			    For intTemp=0 To len(replaceall(i))
				    replacestr=replacestr & "*"
				Next
			    Cret_AddName=replace(Cret_AddName,replaceall(i),replacestr)
			    Cret_Content=replace(Cret_Content,replaceall(i),replacestr)
				replacestr=""
			Next
			IF Web_Const(88)=0 THEN
			    Cret_Content=dvHTMLEncode(checkfSQLStr(Cret_Content))
			Else
			    Cret_Content=checkfSQLStr(Cret_Content)
			End IF
            Rs_c("Cret_ClassId")=Id
            Rs_c("Cret_Class")=bId
            Rs_c("Cret_UserId")=Loginuser_Id
				IF Web_Const(88)=1 THEN
			        Rs_c("Cret_Flag")=int(Loginuser_Flag(12))
				Else
			        Rs_c("Cret_Flag")=Web_Const(92)
				End IF
			IF Session("Loginuser")<>"" THEN
			    Rs_c("Cret_AddName")=Session("Loginuser")
		    Else
			    Rs_c("Cret_AddName")=checkfSQLStr(Cret_AddName)
			End IF
            Rs_c("Cret_Date")=Now()
            Rs_c("Cret_Content")=Cret_Content
            Rs_c("Cret_Ip")=VisitorsIp
            Rs_c("Cret_Ress")=VisitorsRess
        Rs_c.UpDate
        Rs_c.Close
        Set Rs_c=Nothing
		ToHistory="javascript:window.close()"
		saveok="提交成功，我们会尽快回复，感谢您的支持！"
	    Call Form_Saveok()
    End IF
End IF
    Dim CretClassName
	IF bId=1 THEN
    Set Rs=server.Createobject("Adodb.Recordset")
    Sql="Select * from Tx_Products where Products_Id=" & Id
    Rs.open Sql,Conn,1,1
        IF Rs.RecordCount=0 or Id="" THEN 
		    Errorst="无此产品！"
		    Call Form_Error()
		End IF
		CretClassName=Rs("Products_Name")
    Rs.Close
    Set Rs=Nothing
	End IF
	IF bId=2 THEN
    Set Rs=server.Createobject("Adodb.Recordset")
    Sql="Select * from Tx_News where News_Id=" & Id
    Rs.open Sql,Conn,1,1
        IF Rs.RecordCount=0 or Id="" THEN 
		    Errorst="无此新闻！"
		    Call Form_Error()
		End IF
		CretClassName=Rs("News_Title")
    Rs.Close
    Set Rs=Nothing
	End IF
	IF bId=3 THEN
    Set Rs=server.Createobject("Adodb.Recordset")
    Sql="Select * from Tx_Down where Down_Id=" & Id
    Rs.open Sql,Conn,1,1
        IF Rs.RecordCount=0 or Id="" THEN 
		    Errorst="无此软件！"
		    Call Form_Error()
		End IF
		CretClassName=Rs("Down_Name")
    Rs.Close
    Set Rs=Nothing
	End IF
        Page_Name="发表评论 -- " & CretClassName & " -- " & Web_Const(0)
        Call Page_Head()
        %>
        <DIV CLASS="t_talbe2">
        <DIV CLASS="t_talbeall">
        <DIV CLASS="t_talbe1">
            <Form NAME=buy method=post action="Cret.asp?Action=cretsave&bId=<%=bId%>&Id=<%=Id%>" >
            <DIV CLASS="t_talbe3">
            评论对象： <B><%=CretClassName%></B><br>
            评 论 人： <INPUT NAME="C_Name" TYPE="text" CLASS="INPUTimage1" id="C_Name" VALUE="<%=session("Loginuser")%>" <%IF Session("Loginuser")<>"" THEN%> disabled <%End IF%> SIZE="45" maxlength="55"><br>
            评　　级： <Select NAME="Cret_Li" SIZE="1"  ID="Cret_Li" ALIGN="absmiddle" CLASS="INPUTimage1" onChange="document.all.idface.src=options[selectedIndex].value;"><OPTION VALUE="Images/Cret/cret_1.gif">一级</OPTION><OPTION VALUE="Images/Cret/cret_2.gif">二级</OPTION><OPTION VALUE="Images/Cret/cret_3.gif" selected>三级</OPTION><OPTION VALUE="Images/Cret/cret_4.gif">四级</OPTION><OPTION VALUE="Images/Cret/cret_5.gif">五级</OPTION></Select><%IF Cret_Li="" THEN Cret_Li="Images/Cret/cret_3.gif"%>　　　　<IMG hspace=5 SRC=<%=Cret_Li%> vspace="3" BORDER="0" ID="idface" ALIGN="absmiddle"><br>
            评论内容： <TEXTAREA  NAME="C_Content" CLASS="textareaimage" cols="50" rows="7" id="C_Content"></TEXTAREA><br><br>
            <DIV CLASS="table-tstd"><INPUT TYPE="image" src="Skins/Blue/go.gif" NAME="Ok" ALIGN="absmiddle"> <INPUT TYPE="image" src="Skins/Blue/cl.gif"  NAME="Ok" ALIGN="absmiddle" onClick="vbscript:location.reload"></DIV>
            </DIV>
            </Form>
        </DIV>
        </DIV>
        </DIV>
    <%
    Call Page_Bottom()
    Call CloseConn()
    %>