hfdel.asp

安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!

<!--#include file="inc/pstart.asp"-->
<!--#include file="inc/function.asp"-->
<!--#include file="inc/incpage.asp"-->
<!--#include file="inc/bbsinfo.asp"-->
<%
call checkulogin()
call checkhmd()
dim id,hx66close,hx66_time,hx66_title
id=request.querystring("id")
if not IsNumeric(id) or id="" then
   call showmsg("参数非法，指定的主题并不存在")
else
   id=clng(id)
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_saybbs where id="&id
rs.open sqlstr,conn,1,1
if rs.eof then showmsg("没有找到指定的主题")
hx66close=rs("hx66_close")
hx66_time=rs("hx66_time")
hx66_iid=clng(rs("hx66_iid"))
set RelationArt = conn.execute("select hx66_bid,hx66_title from hx66_bbs where id="&hx66_iid&"")
bid=RelationArt(0)
hx66_title=RelationArt(1)
Set RelationArt=Nothing
if username<>""&rs("hx66_user")&"" and checkbbsadmin(bid)=0 and checkadmin(ckuname)<3 then
response.write"<SCRIPT language=JavaScript>alert(' 你没有权限操作别人的回复贴子！');"
response.write"javascript:history.go(-1)</SCRIPT>"
response.end
end if
if useubase=1 and DateDiff("h",hx66_time,now())>=24 and checkbbsadmin(bid)=0 and checkadmin(ckuname)<3 then
response.write"<SCRIPT language=JavaScript>alert(' 贴子已超过允许删除时间，你将不能进行此操作！');"
response.write"javascript:history.go(-1)</SCRIPT>"
response.end
end if
if hx66close=1 and checkbbsadmin(bid)=0 and checkadmin(ckuname)<3 then
response.write"<SCRIPT language=JavaScript>alert(' 本贴已被屏蔽不能进行此操作，请 返 回 ！');"
response.write"javascript:history.go(-1)</SCRIPT>"
response.end
end if
rs.close
set rs=nothing

if request.querystring("action")="del" then'===删除回贴
sql="select * from hx66_saybbs where id="&id
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
conn.execute("update hx66_uinfo set hx66_money=hx66_money-"& hpos &" where hx66_uname='"&rs("hx66_user")&"'")
conn.execute("update hx66_bbs set hx66_hf=hx66_hf-1 where id="&rs("hx66_iid")&"")
conn.execute("update [hx66_bbsset] set allnum=allnum-1")
conn.execute("update [hx66_bbsinfo] set allnum=allnum-1 where id="&bid&"")
rs.delete
rs.close
set rs=nothing
response.redirect Request.ServerVariables("http_referer")
end if

if request.querystring("action")="rewards" then'===回贴奖惩
dim points,dxyes,rew_title,hx66_rewbody
points=int(request.Form("point"))
dxyes=cint(request.Form("dxyes"))
if points=0 then 
   response.write"<SCRIPT language=JavaScript>alert(' 请指定奖惩积分！');JavaScript:window.close();</SCRIPT>"
   response.end
end if
rew_title=left(Trim(request.Form("rew_title")),50)
if rew_title="" then rew_title="无"
hx66_rewbody=rew_title&"|||"&ckuname
if checkbbsadmin(bid)=0 and checkadmin(ckuname)<3 then
response.write"<SCRIPT language=JavaScript>alert(' 你没有权限进行此操作！');"
response.write"JavaScript:window.close();</SCRIPT>"
response.end
end if
sql="select * from hx66_saybbs where id="&id
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
if rs("hx66_point")=0 then
rs("hx66_point")=points
rs("hx66_rewbody")=hx66_rewbody
rs.update
conn.execute("update hx66_uinfo set hx66_money=hx66_money+"& points &" where hx66_uname='"&rs("hx66_user")&"'")
    if dxyes=1 then
        title="论坛贴子奖惩通知"
        bodyMessage="你回复主题贴《"&hx66_title&"》被奖惩："&points&"分。奖惩原因："&rew_title&""
        sql="insert into Message(sender,incept,title,content,sendtime) values('系统短信','"&rs("hx66_user")&"','"&title&"','"&bodyMessage&"','"&now()&"')"
        conn1.execute(sql)
    end if
else
response.write"<SCRIPT language=JavaScript>alert(' 此贴已奖惩过，不能进行此更改操作！');"
response.write"JavaScript:window.close();</SCRIPT>"
response.end
end if
rs.close
set rs=nothing
response.write"<SCRIPT language=JavaScript>alert(' 此贴奖惩成功，刷新页面看到效果！');"
response.write"JavaScript:window.close();</SCRIPT>"
end if

if request.querystring("action")="close" then'===屏蔽回贴
if checkbbsadmin(bid)=0 and checkadmin(ckuname)<3 then
response.write"<SCRIPT language=JavaScript>alert(' 你没有权限进行此操作！');"
response.write"javascript:history.go(-1)</SCRIPT>"
response.end
end if
sql="select * from hx66_saybbs where id="&id
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
if rs("hx66_close")=0 then
rs("hx66_close")=1
rs.update
else
rs("hx66_close")=0
rs.update
end if
rs.close
set rs=nothing
response.redirect Request.ServerVariables("http_referer")
end if
%>