check_jsp.java

做的非常好的论坛

package org.apache.jsp.bbs;

import javax.servlet.*;
import javax.servlet.http.*;
import javax.servlet.jsp.*;
import java.util.*;
import com.jspsmart.upload.*;
import java.sql.*;
import java.util.Date;
import java.text.*;

public final class check_jsp extends org.apache.jasper.runtime.HttpJspBase
    implements org.apache.jasper.runtime.JspSourceDependent {


public String htmln(String ftbbs)
{  String htmlftbbs;
   ftbbs = htmlz(ftbbs,"&lt;","<");
   ftbbs = htmlz(ftbbs,"&gt;",">");
   ftbbs = htmlz(ftbbs,"<br>","\n");
   ftbbs = htmlz(ftbbs,"&nbsp;"," ");
   return ftbbs;
}
public String htmlz(String str,String newstr,String oldstr)
{

 int find = -1;
 int oldrep = oldstr.length();
 
 do{
 find = str.indexOf(oldstr);

 if(find != -1)
    str = str.substring(0,find) + newstr + str.substring(find+oldrep);

   }while(find != -1);

  return str;
}

int picsize;
String menu,sql,strsql,title,TitleID,strDest="";
  private static java.util.Vector _jspx_dependants;

  static {
    _jspx_dependants = new java.util.Vector(3);
    _jspx_dependants.add("/bbs/checkbbsuser.jsp");
    _jspx_dependants.add("/bbs/../inc/conn.jsp");
    _jspx_dependants.add("/bbs/../inc/ftbbstohtml.jsp");
  }

  public java.util.List getDependants() {
    return _jspx_dependants;
  }

  public void _jspService(HttpServletRequest request, HttpServletResponse response)
        throws java.io.IOException, ServletException {

    JspFactory _jspxFactory = null;
    PageContext pageContext = null;
    HttpSession session = null;
    ServletContext application = null;
    ServletConfig config = null;
    JspWriter out = null;
    Object page = this;
    JspWriter _jspx_out = null;
    PageContext _jspx_page_context = null;


    try {
      _jspxFactory = JspFactory.getDefaultFactory();
      response.setContentType("text/html; charset=gb2312");
      pageContext = _jspxFactory.getPageContext(this, request, response,
      			"", true, 8192, true);
      _jspx_page_context = pageContext;
      application = pageContext.getServletContext();
      config = pageContext.getServletConfig();
      session = pageContext.getSession();
      out = pageContext.getOut();
      _jspx_out = out;

      out.write("\r\n");
      out.write(" \r\n");
      out.write("\r\n");
      out.write("\r\n");
      out.write('\r');
      out.write('\n');

String username=null;
username = (String)session.getAttribute("name");
if(username==""||username==null)
{	
  out.print("<script language='javascript'>");
  out.print("alert('你还没有登录论坛，请先登录!');");
  out.print("history.go(-1);");
  out.print("</script>");
  out.close();
}

      out.write('\r');
      out.write('\n');
      out.write('\r');
      out.write('\n');
      out.write('\r');
      out.write('\n');

     //java.sql.Connection conn;
     //java.sql.Statement stmt;
     //java.sql.ResultSet rs;
     //Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver").newInstance();
     //String url="jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=bbs";
     //String user="sa";
     //String password="";
     //conn=DriverManager.getConnection(url,user,password);
     //stmt=conn.createStatement(ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE);
//Class.forName("net.sourceforge.jtds.jdbc.Driver").newInstance(); 
//String url="jdbc:jtds:sqlserver://localhost:1433/bbs;USER=sa;PASSWORD="; 
  Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
  String url="jdbc:odbc:db2000";

Connection conn= DriverManager.getConnection(url); 
Statement stmt=conn.createStatement(ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE); 
//Statement stmt=conn.createStatement();
/*String sql="select BBS_Cate_Name,BBS_Cate_ID,BBS_Cate_PID from BBS_Cate where BBS_Cate_PID='0' and BBS_Cate_ID<>'A_3' and deleted=0 order by totop asc";
ResultSet rs=stmt.executeQuery(sql);
while(rs.next())
out.print(rs.getString("BBS_Cate_Name"));*/
/*String BoardID_1="1",BoardID_2="2",user_id="123",name="3",title="4",menu="5",IP="6",date1="20:00:10",redate="20:00:10",zhiye="123",bbs_img_display="123",bbs_img_text="123",img_url_display="123",deleted="123",picture="123";
String sql="insert into bbstitle(BoardID_1,BoardID_2,user_id,name,title,menu,ip,date1,redate,zhiye,bbs_img_display,bbs_img_text,img_url_display,deleted,picture)";
sql=sql=sql+" values('"+BoardID_1+"','"+BoardID_2+"','"+user_id+"','"+name+"','"+title+"','"+menu+"','"+IP+"','"+date1+"','"+redate+"',"+zhiye+",1,'"+bbs_img_text+"',0,0,'"+picture+"')";
stmt.executeUpdate(sql);*/



/*while(rs.next())
{

   out.print(rs.getObject("id"));
}*/

      out.write('\r');
      out.write('\n');
      out.write('\r');
      out.write('\n');
      out.write('\r');
      out.write('\n');
      out.write('\r');
      out.write('\n');

    String content,bbs_img;
    ResultSet rs,rs1,rs2,rs3,rs4;
	String IP=request.getRemoteAddr();
    Date currTime = new Date();
    SimpleDateFormat formatter = new SimpleDateFormat("yyyy-MM-dd hh:mm:ss",Locale.US);
    String ftime=new String(formatter.format(currTime).getBytes("iso-8859-1"));
	
    SimpleDateFormat formatter2 = new SimpleDateFormat("yyyyMMddhhmmss",Locale.US);
    String ptime=new String(formatter2.format(currTime).getBytes("iso-8859-1"));
	
    sql="select * from config where kind=3 order by id asc";
    Statement stmt4=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
    rs4=stmt4.executeQuery(sql);
	if(rs4.next())
	{
	picsize = Integer.parseInt(rs4.getObject("content").toString());
	}

SmartUpload su = new SmartUpload();
su.initialize(pageContext);
su.upload();

com.jspsmart.upload.File file = su.getFiles().getFile(0);
if (!file.isMissing()){
String myFileName=file.getFileName();//取得上载的文件的文件名
String  suffix=myFileName.substring(0,myFileName.lastIndexOf('.'));//取得不带后缀的文件名

int fileSize=file.getSize();//取得文件的大小
String  ext= su.getFiles().getFile(0).getFileExt(); //取得后缀名

if(fileSize>picsize)
{
   out.print("<script language='javascript'>");
   out.print("alert('你上传文件太大了！');");
   out.print("history.go(-1);");
   out.print("</script>");
   out.close();
   return;
}
if (ext.equals("gif")||ext.equals("GIF")||ext.equals("jpg")||ext.equals("JPG"))
{
}
else
{
   out.print("<script language='javascript'>");
   out.print("alert('只能上传gif,jpg文件类型！');");
   out.print("history.go(-1);");
   out.print("</script>");
   out.close();
   return;
}
String picname=ptime+"."+ext;
bbs_img = picname;
file.saveAs("/upfile/"+picname);//将文件保存在服务器端
}
else{
bbs_img = "";
}

    String BoardID_1 = su.getRequest().getParameter("BoardID_1");
    String BoardID_2 = su.getRequest().getParameter("BoardID_2");
if(BoardID_1==null||BoardID_1.equals("")||BoardID_2==null||BoardID_2.equals("")){
    out.print("<script language='javascript'>");
    out.print("alert('请选择论坛类别！');");
    out.print("history.go(-1);");
    out.print("</script>");
    out.close();
	return;
}
	String zhiye = su.getRequest().getParameter("zhiye");
	title = su.getRequest().getParameter("title");
if(title==null||title.equals("")){
    out.print("<script language='javascript'>");
    out.print("alert('标题不能为空！');");
    out.print("history.go(-1);");
    out.print("</script>");
    out.close();
	return;
}
	menu = su.getRequest().getParameter("menu");
	//String bbs_img = picname;//file.getFileName();
	String bbs_img_text = su.getRequest().getParameter("bbs_img_text");
	String ticon = su.getRequest().getParameter("ticon");
	
    String tptype=su.getRequest().getParameter("tptype");
	String tpnl1=su.getRequest().getParameter("tpnl1");
	String tpnl2=su.getRequest().getParameter("tpnl2");
	String tpnl3=su.getRequest().getParameter("tpnl3");
	String tpnl4=su.getRequest().getParameter("tpnl4");
	String tpnl5=su.getRequest().getParameter("tpnl5");
	String tpnl6=su.getRequest().getParameter("tpnl6");
	String tpnl7=su.getRequest().getParameter("tpnl7");
	String tpnl8=su.getRequest().getParameter("tpnl8");
	String tpnl9=su.getRequest().getParameter("tpnl9");
	String tpnl10=su.getRequest().getParameter("tpnl10");

    String Sql_arrest="select * from BBS_arrest where (kind='Keyword' or kind='IP') order by id asc";
    Statement stmt3=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
    rs3=stmt3.executeQuery(Sql_arrest);
	if(rs3.next()){
	   content=rs3.getString("content");
	   if(menu.indexOf(content)!=-1||IP.indexOf(content)!=-1)
	   {
           out.print("<script language='javascript'>");
           out.print("alert('对不起，回复内容中不能含有"+rs3.getString("content")+"关键字或你的IP被禁止！');");
           out.print("history.go(-1);");
           out.print("</script>");
           out.close();
	   }
	 }

    if(bbs_img==null||bbs_img.equals("")){
    sql="insert into bbstitle(BoardID_1,BoardID_2,user_id,name,title,menu,ip,date1,redate,zhiye,bbs_img_display,bbs_img_text,img_url_display,deleted,picture)";
    sql=sql+" values('"+BoardID_1+"','"+BoardID_2+"','"+(String)session.getAttribute("bbsuser")+"','"+(String)session.getAttribute("name")+"','"+title+"','"+menu+"','"+IP+"','"+ftime+"','"+ftime+"',"+zhiye+",1,'"+bbs_img_text+"',0,0,'"+ticon+"')";
    }
	else{
	sql="insert into bbstitle(BoardID_1,BoardID_2,user_id,name,title,menu,bbs_img,ip,date1,redate,zhiye,bbs_img_display,bbs_img_text,img_url_display,deleted,picture)";
    sql=sql+" values('"+BoardID_1+"','"+BoardID_2+"','"+(String)session.getAttribute("bbsuser")+"','"+(String)session.getAttribute("name")+"','"+title+"','"+menu+"','"+bbs_img+"','"+IP+"','"+ftime+"','"+ftime+"',"+zhiye+",1,'"+bbs_img_text+"',0,0,'"+ticon+"')";
	}
	
	stmt.executeUpdate(sql);

   strsql="update BBS_Cate set BBS_Cate_Topic=BBS_Cate_Topic+1 where BBS_Cate_ID='"+BoardID_1+"'";
    stmt.executeUpdate(strsql);
	
   if(BoardID_2!=null)
	{
	strsql="update BBS_Cate set BBS_Cate_Topic=BBS_Cate_Topic+1 where BBS_Cate_ID='"+BoardID_2+"'";
	stmt.executeUpdate(strsql);
     }
	 
     if((String)session.getAttribute("bz")!="1"){
    strsql="update clubuser set jingyuan=jingyuan+10,tili=tili-10 where clubuser_name='"+(String)session.getAttribute("name")+"'";
    stmt.executeUpdate(strsql);
     }
	 
   sql="select top 1 id,date1 from bbstitle order by id desc";
    //Statement stmt3=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
    rs=stmt.executeQuery(sql);
   if(rs.next()){
      TitleID=rs.getObject("id").toString();
     
	}
 
	response.sendRedirect("checkasp.jsp?id="+TitleID);
	

    } catch (Throwable t) {
      if (!(t instanceof SkipPageException)){
        out = _jspx_out;
        if (out != null && out.getBufferSize() != 0)
          out.clearBuffer();
        if (_jspx_page_context != null) _jspx_page_context.handlePageException(t);
      }
    } finally {
      if (_jspxFactory != null) _jspxFactory.releasePageContext(_jspx_page_context);
    }
  }
}