gbooksave.asp

庐江二中

<!--#include file="conn.asp"-->
<!--#include file="const.asp"-->
<!--#include file="session.asp"-->
<!--#include file="INC/CHAR.INC"-->
<%
dim BigClassName,BigClassType,SmallClassName,SmallClassType,SpecialName,NewsID,content
BigClassName=Request("BigClassName")
BigClassType=Request("BigClassType")
SmallClassName=Request("SmallClassName")
SmallClassType=Request("SmallClassType")
SpecialName=Request("SpecialName")
NewsID=Request("NewsID")	

name=Checkin(trim(request.form("name")))
Password=Checkin(trim(request.form("password")))
content=htmlencode2(trim(request.form("content")))
if name="" or password="" or content="" then
%>
<script language=javascript>
history.back()
alert("用户名，密码和内容都不能为空！")
</script>
<%
Response.End
end if

set rs=server.createobject("adodb.recordset")
sql="select * FROM Users where UserName='"&name&"' and PassWord='"&Password&"'"
rs.Open sql,conn,1,3
if rs.eof then
%>
<script language=javascript>
history.back()
alert("用户不存在或者密码错误！")
</script>
<%
Response.End

else
if isnull(session("xpUser")) or isnull(Session("xpPwd")) or name<>session("xpUser") or Password<>Session("xpPwd") then
rs("logins")=rs("logins")+1
session("xpUser")=name
session("xpPwd")=Password
end if
rs("WGBooks")=rs("WGBooks")+1
rs("UserPoint")=rs("UserPoint")+1
if rs("UserLevel")<>7 and rs("UserLevel")<>8 and rs("UserLevel")<>9 then
if rs("UserPoint")=Point(rs("UserLevel")+1) then rs("UserLevel")=rs("UserLevel")+1
end if
rs.Update
end if	
rs.close

sql="select * from gstbook where (id is null)"
rs.Open sql,conn,1,3
rs.AddNew
rs("BigClassName")=BigClassName
rs("BigClassType")=BigClassType
rs("SmallClassName")=SmallClassName
rs("SmallClassType")=SmallClassType
rs("NewsID")=NewsID
rs("SpecialName")=SpecialName
rs("content")=content
rs("datetime")=now()
rs("name")=session("xpUser")
rs("ip")=Request.ServerVariables("REMOTE_ADDR")
rs.Update
rs.close
set rs=nothing
conn.close
set conn=nothing

if SmallClassName<>"" then 
	Response.Redirect "SmallClass.asp?BigClassName="+BigClassName+"&BigClassType="+BigClassType+"&SmallClassName="+SmallClassName+"&SmallClassType="+SmallClassType
else
if BigClassName<>"" then 
	Response.Redirect "BigClass.asp?BigClassName="+BigClassName+"&BigClassType="+BigClassType	
elseif SpecialName<>"" then 
	Response.Redirect "Special.asp?SpecialName="+SpecialName	
elseif NewsID<>"" then 
	Response.Redirect "shownews.asp?NewsID="+NewsID
else
	Response.Redirect "default.asp"
end if
end if
%>