newtopic.asp

安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!

<!--#include file="conn.asp"-->
<%  
dim bbsurl
bbsurl="bbs/"  '请填写你论坛的正确地址,要以"HTTP://"开头
'*************************************
'上传到与CONN.ASP同级的目录下
'	xinchuang 	2005.9.1
'*************************************
Rem 过滤HTML代码
function HTMLEncode(fString)
if not isnull(fString) then
    fString = replace(fString, ">", "&gt;")
    fString = replace(fString, "<", "&lt;")
    fString = Replace(fString, CHR(32), "&nbsp;")
    fString = Replace(fString, CHR(9), "&nbsp;")
    fString = Replace(fString, CHR(34), "&quot;")
    fString = Replace(fString, CHR(39), "&#39;")
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P> ")
    fString = Replace(fString, CHR(10), "<BR> ")
    HTMLEncode = fString
end if
end function
	dim rs,sql
	dim orders,topic,bbsbid,bname
        dim board
	if request("orders")=1 then
		orders="hx66_count"
	elseif request("orders")=2 then
		orders="hx66_fatime"
        elseif request("orders")=3 then
		orders="hx66_time"
	end if
        if request("hx66_bid")="all" then
            board=""
        elseif isnumeric(request("hx66_bid")) then
            board=" and hx66_bid="&request("hx66_bid")&""
	else
	    board=" and hx66_bid=1"
        end if
        if request("action")=1 then
	'显示主题
          set rs=conn.execute("select top "&replace(request("n"),"'","")&" hx66_Name,hx66_Title,id,hx66_bid,hx66_fatime,hx66_count from hx66_bbs where hx66_delete=0 and datediff('d',hx66_fatime,Now())>="&replace(request("sdate"),"'","")-1&" "&board&" ORDER BY "&orders&" desc")
	elseif request("action")=2 then
        '显示精华主题
          set rs=conn.execute("select top "&replace(request("n"),"'","")&" hx66_Name,hx66_Title,id,hx66_bid,hx66_fatime,hx66_count from hx66_bbs where hx66_delete=0 and datediff('d',hx66_fatime,Now())>="&replace(request("sdate"),"'","")-1&" and hx66_top=2 "&board&" ORDER BY "&orders&" desc")
        else
          set rs=conn.execute("select top "&replace(request("n"),"'","")&" hx66_Name,hx66_Title,id,hx66_bid,hx66_fatime,hx66_count from hx66_bbs where hx66_delete=0 and datediff('d',hx66_fatime,Now())>="&replace(request("sdate"),"'","")-1&" "&board&" ORDER BY "&orders&" desc")
        '显示主题
        end if
       do while Not RS.Eof
       topic=rs(1)
       bbsbid=conn.execute("select top 1 hx66_bbstitle from [hx66_bbsinfo] where id="&rs(3)&"")("hx66_bbstitle")
       if topic="" then
          topic=rs(5)
       end if
       if len(topic)>Cint(request("tlen")) then
          topic=left(topic,request("tlen"))&".."
          end if
       topic=htmlencode(topic)
       if request("bname")=1 then
          bbsbid="『"&bbsbid&"』"
       else
         'bbsbid="<FONT color=#b70000>&nbsp;<B>·</B></FONT>&nbsp;"
         bbsbid="&nbsp;<img border=0 src=\'img\/c3.gif\' align=absmiddle>&nbsp;"
       end if
	response.write "document.write('<table width=100%  border=0 cellspacing=0 cellpadding=0><TR><TD height=22 class=table-xia>"&bbsbid&"<a href="&bbsurl&"bbs_detail.asp?bid="&rs(3)&"&aid="&rs(2)&" target=_top title=主题："&htmlencode(rs(1))&"&#13&#10发表作者："&rs("hx66_Name")&"&#13&#10发表时间："&rs("hx66_fatime")&">');"
        response.write "document.write('"&topic&"');"
	response.write "document.write('</a></TD><TD align=right class=table-xia>');"
      	select case request("info")
	case 0
	case 1
	response.write "document.write('"&rs(5)&"&nbsp;');"
	case 2
	response.write "document.write('"&rs(4)&"&nbsp;');"
	case 3
	response.write "document.write('"&rs(0)&"&nbsp;');"
	case 4
	response.write "document.write('"&rs(0)&","&rs(6)&"&nbsp;');"
	case 5
	response.write "document.write('"&rs(0)&","&formatdatetime(rs("hx66_fatime"),0)&"&nbsp;');"
	case 6
	response.write "document.write('"&rs(0)&","&formatdatetime(rs("hx66_fatime"),1)&"&nbsp;');"
	case 7
	response.write "document.write('"&formatdatetime(rs("hx66_fatime"),2)&"&nbsp;');"
	case 8
	response.write "document.write('"&Right("0"&month(rs("hx66_fatime")),2)&"/"&right("0"&day(rs("hx66_fatime")),2)&"&nbsp;');"
        case else
        end select
        response.write "document.write('</TD></TR></table>');"
       	RS.MoveNext
	Loop
	rs.close
	set rs=nothing
	conn.close
	set conn=nothing
%>