userating.asp

此程序是一个个人主页创造程序,该程序无插件,无任何恶意程序.

<%
'#############################################################
'#      中国在线--极酷论坛 ver.2001 3.0
'#
'#  版权所有: 中国在线 (ChinaXP.Net)
'#
'#  制作人  : 周周 (SeeYa!)
'#
'#
'#  主页地址: http://www.ChinaXP.net/    中国在线
'#	       http://bbs.ChinaXP.Net    中国在线--极酷论坛
'#
'#############################################################
%>
<!--#INCLUDE FILE="config.asp" -->
<!--#INCLUDE FILE="inc_functions.asp" -->
<!--#INCLUDE FILE="inc_top_short.asp" -->
<%
select case Request.QueryString("mode")
	case "finished"
		'##### 用户威望投票登陆 #####
		mLev = cint(ChkUser2(Request.Form("sender"), Request.Form("password")))
		if mLev > 0 then  '## is Member
			if (chkForumModerator(Request.Form("forum_id"), Request.Form("sender")) = "1") or (mLev = 4) _
				or (chkForumModerator(Request.Form("forum_id"), Session(strCookieURL & "userid")) = "1") then

				if Request.Form("member_id")<>"" then
					'### Forum_SQL
					strSql = "SELECT " & strTablePrefix & "MEMBERS.M_NAME, " & strTablePrefix & "MEMBERS.M_RATING "
					strSQL = strSql & " FROM " & strTablePrefix & "MEMBERS "
					strSql = strSql & " WHERE " & strTablePrefix & "MEMBERS.MEMBER_ID = " & Request.Form("member_id")

					set rsmem = my_Conn.Execute (strSql)
					strMemberName = rsmem("M_NAME")
					intMemberRate = rsmem("M_RATING")
					rsmem.close
					set rsmem = nothing
				end if
				if Request.Form("pw")="praise" then
					intMemberRate = intMemberRate + 1
					strMsgRating = "该用户已成功被<font color=red>表扬</font>，增加一点的威望！"
				elseif Request.Form("pw")="warn" then
					intMemberRate = intMemberRate - 1
					strMsgRating = "该用户已成功被<font color=red>警告</font>，减少一点的威望！"
				end if

				if Request.Form("member_id")<>"" And CStr(intMemberRate)<>"" then
					strSql = "UPDATE " & strTablePrefix & "MEMBERS "
					strSQL = strSql & " SET " & strTablePrefix & "MEMBERS.M_RATING = " & CStr(intMemberRate)
					strSql = strSql & " WHERE " & strTablePrefix & "MEMBERS.MEMBER_ID = " & Request.Form("member_id")
					my_Conn.Execute (strSql)
				end if
				 %>
				<P align=center><font face="<% =strDefaultFontFace %>" size="<% =strHeaderFontSize %>"><% =strMsgRating %></font></p>
<%			else %>
				<P align=center><font face="<% =strDefaultFontFace %>" size="<% =strHeaderFontSize %>">你没权限给任一用户威望投票！</font><br>
				<br><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>"><a href="JavaScript: onClick= history.go(-1)">< 返回重新认证 ></a></font></p>
<%			end if %>
<%		else %>
			<P align=center><font face="<% =strDefaultFontFace %>" size="<% =strHeaderFontSize %>">你没权限给任一用户威望投票！</font><br>
			<br><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>"><a href="JavaScript: onClick= history.go(-1)">< 返回重新认证 ></a></font></p>
<%		end if
	case "process"
		'##### 用户威望投票登陆 #####
		mLev = cint(ChkUser2(Request.Form("user"), Request.Form("Pass")))
		if mLev > 0 then  '## is Member
			if (chkForumModerator(Request.Form("forum_id"), Request.Form("user")) = "1") or (mLev = 4) _
				or (chkForumModerator(Request.Form("forum_id"), Session(strCookieURL & "userid")) = "1") then
				
				if Request.Form("member_id")<>"" then
					'### Forum_SQL
					strSql = "SELECT " & strTablePrefix & "MEMBERS.M_NAME, " & strTablePrefix & "MEMBERS.M_RATING "
					strSQL = strSql & " FROM " & strTablePrefix & "MEMBERS "
					strSql = strSql & " WHERE " & strTablePrefix & "MEMBERS.MEMBER_ID = " & Request.Form("member_id") & " "

					set rsmem = my_Conn.Execute (strSql)
					strMemberName = rsmem("M_NAME")
					strMemberRate = rsmem("M_RATING")
					rsmem.close
					set rsmem = nothing
				else
					Response.End
				end if %>
	<table cellpadding=0 cellspacing=0 border=0 width=97% bgcolor=#000000 align=center>
    <tr><td>
    <table cellpadding=6 cellspacing=1 border=0 width=100%>
    <tr>
		<td bgcolor=<% =strHeadCellColor %> align=center><font face="<% =strDefaultFontFace %>" size="<% =strHeaderFontSize %>" color=<% =strHeadFontColor %>><b><% =strMemberName %> 的威望是: <% =strMemberRate %></b></font></td>
	</tr>
	<tr>
		<td bgcolor=<% =strPopUpTableColor %> align=center>
		<form action="userating.asp?mode=finished" method="post">
		<input type=hidden name=sender value="<% =Request.Form("user") %>">
		<input type=hidden name=password value="<% =Request.Form("Pass") %>">
		<input type=hidden name=member_id value="<% =Request.Form("member_id") %>">
		<input type=hidden name=cat_id value=<% =Request.Form("cat_id") %>>
		<input type=hidden name=forum_id value=<% =Request.Form("forum_id") %>>
		<input type=hidden name=topic_id value=<% =Request.Form("topic_id") %>>
		你的选择是: <input type=radio name=pw value=praise CHECKED>赞扬用户 + 1　　<input type=radio name=pw value=warn>警告用户 - 1</td>
	</tr>
	<tr>
		<td bgcolor=<% =strPopUpTableColor %> align=center><font color=<% =strHeadFontColor %>>投票原因:<br><textarea size=20 name="reason" cols="40" rows="5">“投票原因”和“通知用户”，暂时没有使用，可以不填……</textarea></td>
	</tr>
	<tr>
		<td bgcolor=<% =strPopUpTableColor %> align=center>
		通知用户: <input type=radio name=notify value=yes >是　　<input type=radio name=notify value=no CHECKED>否</td>
	<tr>
		<td bgcolor=<% =strHeadCellColor %> align=center>
		<input type=submit value=确认 name=submit>
		</td>
		</form>
	</tr>
	</table>
		</td>
	</tr>
	</table>
<%			end if
		else %>
			<P align=center><font face="<% =strDefaultFontFace %>" size="<% =strHeaderFontSize %>">你没权限给任一用户威望投票！</font><br>
			<br><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>"><a href="JavaScript: onClick= history.go(-1)">< 返回重新认证 ></a></font></p>
<%		end if

	case else
		if Request.Querystring("mode") = "login" then %>
			<P><font face="<% =strDefaultFontFace %>" size="<% =strHeaderFontSize %>">用户威望投票！</p>
<%		end if %>
		<p><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>"><b><font color=red>注意：</font></b>
<%		select case Request.QueryString("mode")
			case "login"
				Response.Write("只有版主跟管理员才能给一个用户投票！")
				strFormMode = "process"
		end select %>
</font></p>
<form action="userating.asp?mode=<% =strFormMode %>" method=post>
<input type=hidden name="topic_id" value="<% =Request.QueryString("topic_id") %>">
<input type=hidden name="forum_id" value="<% =Request.QueryString("forum_id") %>">
<input type=hidden name="cat_id" value="<% =Request.QueryString("cat_id") %>">
<input type=hidden name="member_id" value="<% =Request.QueryString("id") %>">
<%'### 用户威望投票 #################################
	if Request.QueryString("mode") = "LockTop" Then
		strSQL = "SELECT " & strTablePrefix & "TOPICS.T_INPLACE FROM " & strTablePrefix & "TOPICS "
		strSql = strSQL & "WHERE " & strTablePrefix & "TOPICS.TOPIC_ID = " & Request.QueryString("TOPIC_ID")
		set rs = my_conn.Execute(strSql) %><Input type="HIDDEN" name="InPlace" value="<% if rs("T_INPLACE") = 1 then response.write "0" else response.write "1" end if %>">
<% 	End If
'### 用户威望投票 ################################# %>
<table border="0" width="75%" cellspacing="0" cellpadding="0">
  <tr>
    <td bgcolor="<% =strPopUpBorderColor %>">
    <table border="0" width="100%" cellspacing="1" cellpadding="1">
<%		if strAuthType="db" then %>
      <tr>
        <td bgcolor=<% =strPopUpTableColor %> align=right nowrap><b><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>">你的名字：</font></b></td>
        <td bgcolor=<% =strPopUpTableColor %>><input type=text name="User" value="<% =Request.Cookies(strUniqueID & "User")("Name")%>" size=20></td>
      </tr>
      <tr>
        <td bgcolor=<% =strPopUpTableColor %> align=right nowrap><b><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>">你的密码：</FONT></b></td>
        <td bgcolor=<% =strPopUpTableColor %>><input type=Password name="Pass" value="<% =Request.Cookies(strUniqueID & "User")("Pword")%>" size=20></td>
      </tr>
<%		else %>
<%			if strAuthType="nt" then %>
      <tr>
        <td bgcolor=<% =strPopUpTableColor %> align=right nowrap><b><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>">NT 帐号：</font></b></td>
        <td bgcolor=<% =strPopUpTableColor %>><font face="<% =strDefaultFontFace %>" size="<% =strDefaultFontSize %>"><%=Session(strCookieURL & "userid")%></FONT></td>
      </tr>
<%			end if %>
<%		end if %>
      <tr>
        <td bgColor=<% =strPopUpTableColor %> colspan=2 align=center><Input type=Submit value="提交"></td>
      </tr>
    </table>
    </td>
  </tr>
</table>
</form>
</font>
<% end select %><!--#INCLUDE FILE="inc_footer_short.asp" -->