dgsave.asp

安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!

<!--#include file="inc/pstart.asp"-->
<!--#include file="inc/bbsinfo.asp"-->
<!--#include file="inc/function.asp"-->
<!--#include file="inc/ubbcode.asp"--> 
<%call bbs_top()%>
<table cellpadding=3 cellspacing=1 border=0 align=center width=760 bgcolor=#FFFFFF class="table-hx66s">
<TR><TD>
<%dim isfull
isfull=false	
if UserLogined<>True then
  error2("客人不可以撰写点歌，请您登陆或者注册！")
  response.end
end if
%><table cellpadding=3 cellspacing=1 border=0 align=center>
			<tr>
				<td><a href=dglistall.asp><b>所有点歌列表</b></a></td>
				<td><a href=dglistme.asp><b>我的点歌列表</b></a></td>
				<td><a href=dgwrite.asp><b>我要点歌</b></a></td>
			</tr>
			<tr>
				<td align=center valign=middle colspan="3">点首歌曲祝福你的好友</td>
                        </tr>
			<tr>
				<td align=center valign=middle colspan="3"><a href=default.asp>返回论坛</a>&nbsp;&nbsp;&nbsp;<a href="javascript:window.close()">关闭此页面</a></td>
			</tr>
			
		</table>
		<br>
<% 
dim lincept,lcontent,lmedianame,lurl,sql
lincept=replace(Request.Form("incept"),"'","")
lcontent=Server.HTMLEncode(replace(Request.Form("content"),"'",""))
lmedianame=Server.HTMLEncode(replace(Request.Form("medianame"),"'",""))
lurl=Server.HTMLEncode(replace(Request.Form("url"),"'",""))
if lincept="" then 
	error2("请输入接收用户名")
else
	if instr(lincept,"全体会员")>0 then
		lincept="全体会员"
		isfull=true
	else 	
		lincept=split(lincept,"|")
		if ubound(lincept)>=5 then
			error2("最多只能发送给5个用户")
		end if
	end if	
end if
if lmedianame="" then 
	error2("请输入歌曲名")
end if
if lurl="" or lurl="http://" then 
	error2("请正确输入音乐地址")
end if
if lcontent="" then 
	error2("请输入祝福语")
end if
if len(lmedianame)>50 then 
	error2("歌曲名不能多于50字")
end if
if len(lcontent)>200 then 
	error2("祝福语不能多于200字")
end if
	dim haverr      '是否有不存在的用户
	haverr=false
	call updata()
	call success()
'===================================
sub updata()
	dim ii
	if isfull then
			set rs=server.createobject("adodb.recordset")
			sql="select * from media" 
			rs.open sql,conn,3,2
			rs.addnew
			rs("sender")=ckuname
			rs("incept")=lincept
			rs("sendtime")=now()
			rs("content")=lcontent
			rs("medianame")=lmedianame
			rs("url")=lurl
			rs.update
			rs.close
			set rs=nothing
                        %>
<script language="vbscript">
			msgbox "点歌祝福已成功发出!你向论坛所有的会员发送了点歌祝福"	
</script>
	<%else	
		for ii=0 to ubound(lincept)
                        set conn1=server.CreateObject("adodb.connection")
                        DBPath = Server.MapPath(mdb)
                        conn1.open "provider=microsoft.jet.oledb.4.0; data source="&DBpath
			set rs=server.createobject("adodb.recordset")
			sql="select username,userid from [user] where username='"&lincept(ii)&"'"
			rs.open sql,conn1,1,1
			if rs.eof and rs.bof then
				error2("本站没有["&lincept(ii)&"]这个会员，请确定后重发。")
				haverr=true
			else
			        dim touserid
                                touserid=rs("userid")
                          	rs.close
				sql="select * from media" 
				rs.open sql,conn,3,2
				rs.addnew
				rs("sender")=ckuname
				rs("incept")=lincept(ii)
				rs("sendtime")=now()
				rs("content")=lcontent
				rs("medianame")=lmedianame
				rs("url")=lurl
				rs.update
				rs.close
				set rs=nothing	
				dim sender,title,body,content2
				sender=ckuname
				title="送给您的祝福"
				body="[color=green]"&[ckuname]&"[/color] 点了一首歌 [color=navy]"&lmedianame&"[/color] 给你！"&chr(10)&"祝福语：[color=blue]"&lcontent&"[/color] "&chr(10)&"[B][URL=bbs/dglistme.asp]点击这里查看点歌[/URL][/B]"
		                content2=body&"|"&now()+timeset/24
sql="insert into Message(sender,incept,title,content,sendtime) values('"&ckuname&"','"&lincept(ii)&"','"&title&"','"&content2&"','"&now()+timeset/24&"')"
conn1.execute(sql)
%>
<script language="vbscript">
msgbox "点歌祝福已成功发出!系统已向[<%=lincept(ii)%>]发出短消息通知。"	
</script>
<%	

		end if	
		next
	end if		
end sub
sub success()
if haverr then
mes="<li>操作失败！<br><li>用户不存在<br><li><a href=javascript:history.go(-1)> << 返回上一页</a>"
else
mes="<li>操作成功！<br><li><a href=dgwrite.asp>继续点歌<br><li><a href=default.asp> << 返回首页</a>"
end if
end sub
%>
<%
sub error2(message)
%><script>alert('<%=message%>');history.back();</script><script>window.close();</script>
<%response.end
end sub%>
</td>
</tr>
</table>
</body>
</html>