📄 newsgrid.jsp
字号:
<%@ page contentType="text/html;charset=gb2312"%>
<%@ include file="Common.jsp" %><%!
//
// Filename: newsGrid.jsp
static final String sFileName = "newsGrid.jsp";
static final String PageBODY = "text=\"#000000\" link=\"#000080\" vlink=\"#000080\" alink=\"#000080\"";
static final String FormTABLE = "border=\"0\" cellspacing=\"2\" cellpadding=\"0\"";
static final String FormHeaderTD = "align=\"center\" bgcolor=\"#FFBB55\"";
static final String FormHeaderFONT = "style=\"font-size: 12pt; color: #FFFFFF; font-family: Arial, Tahoma, Verdana, Helvetica; font-weight: bold\"";
static final String FieldCaptionTD = "bgcolor=\"#FFDD00\"";
static final String FieldCaptionFONT = "style=\"font-size: 10pt; color: #000000; font-family: Arial, Tahoma, Verdana, Helvetica\"";
static final String DataTD = "";
static final String DataFONT = "style=\"font-size: 10pt; color: #000000; font-family: Arial, Tahoma, Verdana, Helvetica\"";
static final String ColumnFONT = "style=\"font-size: 10pt; color: #FFFFFF; font-family: Arial, Tahoma, Verdana, Helvetica; font-weight: bold\"";
static final String ColumnTD = "bgcolor=\"#000000\"";
%><%
String cSec = checkSecurity(3, session, response, request);
if ("sendRedirect".equals(cSec) ) return;
boolean bDebug = false;
String sAction = getParam( request, "FormAction");
String sForm = getParam( request, "FormName");
String snewsErr = "";
String sSearchErr = "";
java.sql.Connection conn = null;
java.sql.Statement stat = null;
String sErr = loadDriver();
conn = cn();
stat = conn.createStatement();
if ( ! sErr.equals("") ) {
try {
out.println(sErr);
}
catch (Exception e) {}
}
%>
<html>
<head>
<title>news_list</title>
<meta http-equiv="pragma" content="no-cache"/>
<meta http-equiv="expires" content="0"/>
<meta http-equiv="cache-control" content="no-cache"/>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" link="#000080" vlink="#000080" alink="#000080">
<jsp:include page="Header.jsp" flush="true"/>
<table>
<tr>
<td valign="top">
<% Search_Show(request, response, session, out, sSearchErr, sForm, sAction, conn, stat); %>
</td>
</tr>
</table>
<table>
<tr>
<td valign="top">
<% news_Show(request, response, session, out, snewsErr, sForm, sAction, conn, stat); %>
</td>
</tr>
</table>
</body>
</html>
<%%>
<%
if ( stat != null ) stat.close();
if ( conn != null ) conn.close();
%>
<%!
void news_Show (javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, javax.servlet.http.HttpSession session, javax.servlet.jsp.JspWriter out, String snewsErr, String sForm, String sAction, java.sql.Connection conn, java.sql.Statement stat) throws java.io.IOException {
String sWhere = "";
int iCounter=0;
int iPage = 0;
boolean bIsScroll = true;
boolean hasParam = false;
String sOrder = "";
String sSQL="";
String transitParams = "";
String sQueryString = "";
String sPage = "";
int RecordsPerPage = 20;
String sSortParams = "";
String formParams = "";
String pnews_login="";
String photnews="";
String pname="";
transitParams = "news_login=" + toURL(getParam( request, "news_login")) + "&name=" + toURL(getParam( request, "name")) + "&hotnews=" + toURL(getParam( request, "hotnews")) + "&";
formParams = "news_login=" + toURL(getParam( request, "news_login")) + "&name=" + toURL(getParam( request, "name")) + "&hotnews=" + toURL(getParam( request, "hotnews")) + "&";
// Build WHERE statement
//-- Check news_login parameter and create a valid sql for where clause
pnews_login = getParam( request, "news_login");
if (pnews_login != null && ! pnews_login.equals("")) {
hasParam = true;
sWhere += "e.news_login like '%" + replace(pnews_login, "'", "''") + "%'";
}
//-- Check hotnews parameter and create a valid sql for where clause
photnews = getParam( request, "hotnews");
if ( ! isNumber (photnews)) {
photnews = "";
}
if (photnews != null && ! photnews.equals("")) {
if (! sWhere.equals("")) sWhere += " and ";
hasParam = true;
sWhere += "e.hotnews=" + photnews;
}
//-- Check name parameter and create a valid sql for where clause
pname = getParam( request, "name");
if (pname != null && ! pname.equals("")) {
if (! sWhere.equals("")) sWhere += " and ";
hasParam = true;
sWhere += "e.name like '%" + replace(pname, "'", "''") + "%'";
}
if (hasParam) { sWhere = " WHERE (" + sWhere + ")"; }
// Build ORDER statement
sOrder = " order by e.news_login Asc";
String sSort = getParam( request, "Formnews_Sorting");
String sSorted = getParam( request, "Formnews_Sorted");
String sDirection = "";
String sForm_Sorting = "";
int iSort = 0;
try {
iSort = Integer.parseInt(sSort);
}
catch (NumberFormatException e ) {
sSort = "";
}
if ( iSort == 0 ) {
sForm_Sorting = "";
}
else {
if ( sSort.equals(sSorted)) {
sSorted="0";
sForm_Sorting = "";
sDirection = " DESC";
sSortParams = "Formnews_Sorting=" + sSort + "&Formnews_Sorted=" + sSort + "&";
}
else {
sSorted=sSort;
sForm_Sorting = sSort;
sDirection = " ASC";
sSortParams = "Formnews_Sorting=" + sSort + "&Formnews_Sorted=" + "&";
}
if ( iSort == 1) { sOrder = " order by e.news_login" + sDirection; }
if ( iSort == 2) { sOrder = " order by e.name" + sDirection; }
if ( iSort == 3) { sOrder = " order by e.news_level" + sDirection; }
if ( iSort == 4) { sOrder = " order by e.hotnews" + sDirection; }
}
sSQL = "select e.news_id as e_news_id, " +
"e.news_level as e_news_level, " +
"e.title as e_title, " +
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -