boardsave.asp

社区天地图文系统(核心:尘缘雅境图文系统) 版本: 1.0 本系统是ASP+ACCESS环境下开发成功

<!--#include file=conn.asp --><!--#include file="char.inc"--><!--#include file="chkuser.asp" -->
<!--#include file=../include/config.asp -->
<%
IF request.cookies("KEY")<>"super" THEN
response.redirect "index_face.asp"
response.end
else
usernamecookie=CheckStr(request.cookies("UserName"))
passwdcookie=replace(trim(Request.cookies("passwd")),"'","''")
KEYcookie=replace(trim(request.cookies("KEY")),"'","''")
if usernamecookie="" or passwdcookie="" then
response.redirect "login.asp"
response.end
else
'判断用户的合法性
  set rs=server.createobject("adodb.recordset")
  sql="select * from admin where username='"&usernamecookie&"'"
  rs.open sql,conn,1,1
  if rs.eof and rs.bof then
             response.redirect "login.asp"
            response.end
         end if
  IF passwdcookie<>rs("passwd") THEN
          response.redirect "login.asp"
           response.end
      END IF
   '下面判断用户级别实际在有用户级别是都应该判断
   if KEYcookie<>rs("OSKEY") then
      response.redirect "index_face.asp"
      response.end
    end if
           rs.close
           set rs=nothing
END IF
END IF
%>
<%
function changechr(str) 
    changechr=replace(replace(replace(replace(str,"<","&lt;"),">","&gt;"),chr(13),"<br>")," "," ") 
    changechr=replace(changechr,"'","&quot;")
    changechr=replace(changechr,mid(" "" ",2,1),"&quot;")
end function
function checkStr(str)
	if isnull(str) then
		checkStr = ""
		exit function 
	end if
	checkStr=replace(str,"'","''")
end function
title=request.form("title")
if title="" then
%>
<script language=javascript>
history.back()
alert("请填写公告标题！")
</script>
<%
Response.End
end if

if len(title)>100 then
%>
<script language=javascript>
history.back()
alert("公告标题过长！")
</script>
<%
Response.End
end if

Content=Request.Form("Content")
if Content="" then
%>
<script language=javascript>
history.back()
alert("请输入公告内容！")
</script>

<%
Response.End
end if

upload=Request.Form("upload")

SQL="insert into board(content,upload,title,dateandtime) values('" & content & "','" & upload & "','" & title & "',now())" 
conn.Execute SQL


	conn.close
	set conn=nothing
	Response.Redirect "boardManage.asp"
%>