gbookreply.asp

庐江二中

<!--#include file="conn.asp"-->
<!--#include file="const.asp"-->
<!--#include file="session.asp"-->
<!--#include file="INC/CHAR.INC"-->
<%
id=Request.QueryString("id")
if id="" then
%>
<script language=javascript>
history.back()
alert("不存在！")
</script>
<%
Response.End
end if

if session("rewrite")=1 then
%>
<script language=javascript>
history.back()
alert("回复过的帖子不能重发")
</script>
<%
Response.End
end if

if request("name")="" then
%>
<script language=javascript>
history.back()
alert("您得填写您的名字哦！")
</script>
<%
Response.End
end if

if request("content")="" then
%>
<script language=javascript>
history.back()
alert("回复不能为空")
</script>
<%
Response.End
end if

if request("content")<>"" and len(request("content"))>100 then
%>
<script language=javascript>
history.back()
alert("回复字数不能超过 100 字")
</script>
<%
Response.End
end if

writetime=cstr(now())

name=Checkin(trim(request.form("name")))
Password=Checkin(trim(request.form("password")))
content=htmlencode2(trim(request.form("content")))
if name="" or password="" or content="" then
%>
<script language=javascript>
history.back()
alert("用户名，密码和内容都不能为空！")
</script>
<%
Response.End
end if

set rs=server.createobject("adodb.recordset")
sql="select * FROM Users where UserName='"&name&"' and PassWord='"&Password&"'"
rs.Open sql,conn,1,3
if rs.eof then
%>
<script language=javascript>
history.back()
alert("用户不存在或者密码错误！")
</script>
<%
Response.End

else
if isnull(session("xpUser")) or isnull(Session("xpPwd")) or name<>session("xpUser") or Password<>Session("xpPwd") then
rs("logins")=rs("logins")+1
session("xpUser")=name
session("xpPwd")=Password
end if
rs("replay")=rs("replay")+1
rs("UserPoint")=rs("UserPoint")+1
rs("LimitPoint")=rs("LimitPoint")-2
if rs("UserLevel")<7 and rs("UserPoint")=Point(rs("UserLevel")+1) then rs("UserLevel")=rs("UserLevel")+1
rs.Update
end if	
rs.close

sql="select * from gstbook where id ="&id
rs.open sql,conn,3,2
if not rs.bof and not rs.eof then
rs("content")=rs("content")+"<br>　　【"+session("xpUser")+"&nbsp;"+request("type")+"】："+request("content")+" ["+writetime+"]"
rs("replay")=rs("replay")+1
rs.update
session("rewrite")=1
end if
rs.close
set rs=nothing
conn.close
set conn=nothing

dim SmallClassName,SmallClassType,SpecialName,NewsID,IfClassurl,thistitle,more
BigClassName=Request("BigClassName")
BigClassType=Request("BigClassType")
SmallClassName=Request("SmallClassName")
SmallClassType=Request("SmallClassType")
SpecialName=Request("SpecialName")
NewsID=Request("NewsID")
	
ifclassurl="default.asp"	
if BigClassName<>"" then
	ifclassurl="BigClassName="&BigClassName&"&BigClassType="&BigClassType
	page="BigClass.asp?"
end if
if SmallClassName<>"" then
	ifclassurl="BigClassName="&BigClassName&"&BigClassType="&BigClassType&"&SmallClassName="&SmallClassName&"&SmallClassType="&SmallClassType
	page="SmallClass.asp?"
end if	
if SpecialName<>"" then
	ifclassurl="SpecialName="&SpecialName
	page="Special.asp?"
end if	
if NewsID<>"" then
	ifclassurl="NewsID="&NewsID
	page="shownews.asp?"
end if

if Request("more")<>1 then
	Response.Redirect page & ifclassurl
else
	Response.Redirect "gbookmore.asp?id=" & id &ifclassurl
end if
%>