admin_code_guest.asp

一套非常不错的天然气有限公司

<%
'=================================================
'过程名：ShowGuestPage()
'作  用：显示留言底部分页
'参  数：无
'=================================================
sub ShowGuestPage()
	dim PageFileName
	PageFileName=strFileName
	if keyword<>"" then
		PageFileName=PageFileName&"?keyword="&keyword
	end if
	if action<>"" then
		PageFileName=PageFileName&"?action="&action
	end if
	if TotalPut>0 then
		call showpage(PageFileName,totalPut,MaxPerPage,true,true,"条留言")
	end if
end sub

'=================================================
'过程名：SaveWriteGuest()
'作  用：保存留言
'参  数：无
'=================================================
sub SaveWriteGuest()
	dim SaveEditId,GuestName,GuestSex,GuestOicq,GuestEmail,GuestHomepage,GuestFace,GuestImages,GuestIcq,GuestMsn
	dim GuestTitle,GuestContent,GuestIsPrivate,GuestIsPassed
	dim GuestPassword,GuestPasswordConfirm,GuestQuestion,GuestAnswer,GuestUserlevel
	dim sqlMaxId,rsMaxId,MaxId,Saveinfo,sqlReg,rsReg

	GuestContent=request("GuestContent")
	if GuestType=0 then
		GuestName=trim(request("GuestName"))
		GuestSex=trim(request("GuestSex"))
		GuestOicq=trim(request("GuestOicq"))
		if GuestOicq<>"" then
			if not isnumeric(GuestOicq) or len(cstr(GuestOicq))>10 then
				GuestOicq=0
			end if
		else
			GuestOicq=0
		end if
		GuestIcq=trim(request("GuestIcq"))
		if GuestIcq<>"" then
			if not isnumeric(GuestIcq) or len(cstr(GuestIcq))>10 then
				GuestIcq=0
			end if
		else
			GuestIcq=0
		end if
		GuestMsn=trim(request("GuestMsn"))
		GuestEmail=trim(request("GuestEmail"))
		GuestHomepage=trim(request("GuestHomepage"))
		if GuestHomepage="http://" or isnull(GuestHomepage) then GuestHomepage=""
	else
		GuestName=LoginName
	end if
	GuestImages=trim(request("GuestImages"))
	GuestFace=trim(request("GuestFace"))
	GuestTitle=trim(request("GuestTitle"))
	GuestIsPrivate=trim(request("GuestIsPrivate"))
	if GuestIsPrivate="yes" then
		GuestIsPrivate=True
	else
		GuestIsPrivate=False
	end if
	if EnableGuestCheck="Yes" then
		GuestIsPassed=False
	else
		GuestIsPassed=True
	end if
	SaveEdit=request("saveedit")
		
	if GuestName="" or GuestTitle="" or GuestContent="" then
		call Guest_info("<li>留言发送失败！</li><li>请将必要的信息填写完整！</li>")
		exit sub
	end if

	if SaveEdit=1 then
		SaveEditId=request("saveeditid")
		if SaveEditId="" then
			call Guest_info("<li>请指定要编辑的留言ID！</li>")
			exit sub
		else
			sqlMaxId="select max(GuestMaxId) as MaxId from Guest"
			set rsMaxId=conn.execute(sqlMaxId)
			MaxId=rsMaxId("MaxId")
			if MaxId="" or isnull(MaxId) then MaxId=0
			set rsGuest=server.createobject("adodb.recordset")
			sql="select * from Guest where GuestID="&SaveEditId
			rsGuest.open sql,conn,1,3
			rsGuest("GuestName")=GuestName
			rsGuest("GuestSex")=GuestSex
			rsGuest("GuestOicq")=GuestOicq
			rsGuest("GuestIcq")=GuestIcq
			rsGuest("GuestMsn")=GuestMsn
			rsGuest("GuestEmail")=GuestEmail
			rsGuest("GuestHomepage")=GuestHomepage
			rsGuest("GuestIP")=Request.ServerVariables("REMOTE_ADDR")
			rsGuest("GuestTitle")=GuestTitle
			rsGuest("GuestFace")=GuestFace
			rsGuest("GuestContent")=GuestContent
			rsGuest("GuestDatetime")=now()
			rsGuest("GuestImages")=GuestImages
			rsGuest("GuestMaxId")=MaxId+1
			rsGuest("GuestIsPrivate")=GuestIsPrivate
			rsGuest("GuestIsPassed")=GuestIsPassed
			rsGuest.update
			if EnableGuestCheck="Yes" then
				call Guest_info("<li>留言编辑成功！</li><li>只有管理员审核通过的留言才会显示出来。</li>")
			else
				call Guest_info("<li>留言编辑成功！</li>")
			end if
		end if
	else
		if GuestContent<>session("OldGuestContent") then 
			session("OldGuestContent")=GuestContent
			sqlMaxId="select max(GuestMaxId) as MaxId from Guest"
			set rsMaxId=conn.execute(sqlMaxId)
			MaxId=rsMaxId("MaxId")
			if MaxId="" or isnull(MaxId) then MaxId=0
			set rsGuest=server.createobject("adodb.recordset")
			sql="select * from Guest"
			rsGuest.open sql,conn,1,3
			rsGuest.addnew
			rsGuest("GuestType")=GuestType
			rsGuest("GuestName")=GuestName
			rsGuest("GuestSex")=GuestSex
			rsGuest("GuestOicq")=GuestOicq
			rsGuest("GuestIcq")=GuestIcq
			rsGuest("GuestMsn")=GuestMsn
			rsGuest("GuestEmail")=GuestEmail
			rsGuest("GuestHomepage")=GuestHomepage
			rsGuest("GuestIP")=Request.ServerVariables("REMOTE_ADDR")
			rsGuest("GuestTitle")=GuestTitle
			rsGuest("GuestFace")=GuestFace
			rsGuest("GuestContent")=GuestContent
			rsGuest("GuestDatetime")=now()
			rsGuest("GuestImages")=GuestImages
			rsGuest("GuestMaxId")=MaxId+1
			rsGuest("GuestIsPrivate")=GuestIsPrivate
			rsGuest("GuestIsPassed")=GuestIsPassed
			rsGuest.update
			if EnableGuestCheck="Yes" then
				Saveinfo="<li>您的留言已经发送成功！</li><li>只有管理员审核通过的留言才会显示出来。</li>"
			else
				Saveinfo="<li>您的留言已经发送成功！</li>"
			end if

			if request("reg")=1 and GuestType=0 then
				GuestPassword=trim(request("psw"))
				GuestPasswordConfirm=trim(request("pswc"))
				GuestQuestion=trim(request("question"))
				GuestAnswer=trim(request("answer"))
				set rsReg=server.createobject("adodb.recordset")
				sql="select * from " & db_User_Table & " where " & db_User_Name & "='"&GuestName&"'"
				rsReg.open sql,Conn_User,1,3
				if not rsReg.eof and not rsReg.bof then
					Saveinfo= Saveinfo & "<li>注册失败！您输入的名字已经被注册。</li>"
				elseif GuestName="" or strLength(GuestName)>14 or strLength(GuestName)<4 then
					Saveinfo= Saveinfo & "<li>注册失败！输入用户名不符合要求(不能大于14小于4)</li>"
				elseif Instr(GuestName,"<")>0 or Instr(GuestName,">")>0 or Instr(GuestName,"=")>0 or Instr(GuestName,"%")>0 or Instr(GuestName,chr(32))>0 or Instr(GuestName,"?")>0 or Instr(GuestName,"&")>0 or Instr(GuestName,";")>0 or Instr(GuestName,",")>0 or Instr(GuestName,"'")>0 or Instr(GuestName,",")>0 or Instr(GuestName,chr(34))>0 or Instr(GuestName,chr(9))>0 or Instr(GuestName,"