agree.jsp

做的非常好的论坛

<%@ page contentType="text/html; charset=gb2312"%>
<%@ page import="java.sql.*"%> 
<%@ page import="java.util.*"%>
<%@ page import="java.util.Date"%>
<%@ page import="java.text.*"%>
<%@ include file="checkbbsuser.jsp"%>
<%@ include file="../inc/conn.jsp"%>
<%!String sql,username,smscontent,msg,str,postusera;%>
<%
  String postuser1 = new String(request.getParameter("postuser").getBytes("iso-8859-1"));
  String postuser = new String(request.getParameter("postuser").getBytes("iso-8859-1"));
  sql="select * from clubuser where clubuser_name='"+session.getAttribute("name")+"'";
  ResultSet rs=stmt.executeQuery(sql);
  rs.next();
  String strdb=rs.getString("friend"); 
  String strdbx=rs.getString("friend");
  
  	 if(strdb!=null)
	    {
         int i; 
         while((i=strdb.indexOf("|"))!=-1){
         int b = strdb.lastIndexOf("|");
         int len = strdb.length();
         username=strdb.substring(b+1,len);
         strdb=strdb.substring(0,b);

		 if(postuser.indexOf(username)!=-1){
           out.print("<script language='javascript'>");
           out.print("alert('你已经加入了该用户为好友!');");
           out.print("history.go(-1);");
           out.print("</script>");
           out.close();
		   return;
           }
		 }
       }
	   	   if(strdbx!=null){
	       postuser=strdbx+"|"+postuser;
	    }
				else{
		   postuser=session.getAttribute("bbsuser")+"|"+postuser;
		}
		 msg=session.getAttribute("bbsuser")+"已经加"+postuser+"为好友";
         smscontent=session.getAttribute("bbsuser")+"已经加"+postuser+"为好友";
		 str="update clubuser set friend='"+postuser+"' where clubuser_name='"+session.getAttribute("name")+"'";
		 stmt.executeUpdate(str);
		 SimpleDateFormat formatter = new SimpleDateFormat("yyyy-MM-dd hh:mm:ss",Locale.US);
         String ftime=new String(formatter.format(currTime).getBytes("iso-8859-1"));
         sql="insert into sms(title,content,sender,accepter,bbssystem,indate) values('"+msg+"','"+smscontent+"','"+session.getAttribute("name")+"','"+postuser1+"',0,'"+ftime+"')";
         stmt.executeUpdate(sql);
		 
		 out.print("<script language='javascript'>");
         out.print("alert('确认成功');");
         out.print("history.go(-1);");
         out.print("</script>");
         out.close();		   
	     stmt.close(); 
         conn.close();
  
%>