c_fatie.asp

BBS电子公告系统

<!--#include file="d_lj.asp" -->
<%
	bankuai=clng(Request("xuhao"))
	xinqing=Request.Form("xinqing")
	biaoti=Trim(Request.Form("biaoti"))
		if instr(biaoti,"'")>0 or instr(biaoti,"&#")>0 then
			response.Redirect("b_fatie.asp?fanhui=feifa&bankuai="& bankuai &"")
		end if
	neirong=replace(Trim(Request.Form("neirong")),"'","@#$%3v42q")
	mingzi=request.Cookies("mingzi")
	cmima=request.Cookies("mima")
		if Instr(mingzi,"=")>0 or Instr(mingzi,"'")>0 or Instr(mingzi,"(")>0 or Instr(mingzi,")")>0 then
			response.Redirect("b_bankuai.asp")
		end if
	set youke=lj.execute("select youkefatie from luntan")
		if youke("youkefatie")<>0 then
			if mingzi="" then
				response.Redirect("b_fatie.asp?fanhui=youke&bankuai="& bankuai &"")
			end if
		end if
		if mingzi="" then
			mingzi="游客"
		else
			set yz=lj.execute("select mima from huiyuan where mingzi='"& mingzi &"'")
			if yz("mima")<>cmima then
				response.Redirect("b_bankuai.asp")
			end if
		end if
		if biaoti="" or neirong="" then
			response.Redirect("b_fatie.asp?fanhui=kong&bankuai="& bankuai &"")
		end if
		if len(neirong)>65535 then
			response.Redirect("b_fatie.asp?fanhui=duo&bankuai="& bankuai &"")
		end if
	lj.execute("insert into tiezi(xinqing,biaoti,neirong,mingzi,shijian,bankuai,tiezi) values("& xinqing &",'"& biaoti &"','"& neirong &"','"& mingzi &"',now(),"& bankuai &",'tiezi')")
	response.Redirect("b_luntan.asp?bankuai="& bankuai &"")
%>