addreview.asp

综合信息管理系统

<%@ Language=VBScript %>
<!--#include file=include/conn.asp -->
<%
reviewID=Request.Form("reviewID")
NewsID=Request.Form("NewsID")
url=trim(Request.Form("url"))
Author=trim(Request.Form("Author"))
if author="" then
Response.Write "请输入您的姓名！"
Response.End
end if
author=replace(author,"'","''")

email=trim(Request.Form("email"))
if email="" then
Response.Write "请输入您的EMAIL。"
Response.End
end if
email=replace(email,"'","''")

Content=trim(Request.Form("content"))
if content="" then
Response.Write "请输入评论内容."
Response.End
end if
content=replace(content,"'","''")

sql="INSERT INTO ReView (NewsID,Author,Email,Content,updatetime) values (" & NewsID & ",'" & Author & "','" & Email & "','" & Content & "','" & now() & "')"
conn.Execute (sql)

reviewid=reviewID+1
newsid=newsid

Response.Redirect url

%>