syscode_blog.asp

后台登陆admin.asp

          <option value="7|露水" <%If e_blogWeather="7|露水" Then Response.Write("selected")%>>露水</option>
        </select>&nbsp;<img id="show_Weather" src="img/blog/0.gif" align="absmiddle"> </td>
   </tr>
   <tr>
      <td align="right">分类：</td>
      <td><select name="elog_CateID" id="elog_CateID" class="input">
           <%Dim Cat_Nums,Cat_NumI
	     Cat_Nums=Ubound(Arr_Cat,2)
	     For Cat_NumI=0 To Cat_Nums%>
	       <option value="<%=Arr_Cat(0,Cat_NumI)%>" <%If blog_Edit("blog_CateID")=Arr_Cat(0,Cat_NumI)  Then Response.Write("selected")%>><%=Arr_Cat(1,Cat_NumI)%></option>
	     <%Next%></select>&nbsp;|&nbsp;<input name="blogdele" type="checkbox" id="blogdele" value="1">删除此日志</td>
   </tr>
   <tr>
      <td align="right">属性：</td>
      <td><input name="elog_IsShow" type="radio" value="0" <%IF blog_Edit("blog_IsShow")=True Then Response.Write("checked")%>>公开日志&nbsp;<input type="radio" name="elog_IsShow" value="1" <%IF blog_Edit("blog_IsShow")=False Then Response.Write("checked")%>>隐藏日志&nbsp;||&nbsp;<input name="elog_IsTop" type="checkbox" id="elog_IsTop" value="1" <%IF blog_Edit("blog_IsTop")=True Then Response.Write("checked")%>>置顶日志&nbsp;<input name="elog_IsBest" type="checkbox" id="elog_IsBest" value="1" <%IF blog_Edit("blog_IsBest")=True Then Response.Write("checked")%>>精华日志&nbsp;<input name="elog_DisComment" type="checkbox" id="elog_DisComment" value="1" <%IF blog_Edit("blog_DisComment")=True Then Response.Write("checked")%>>禁止评论</td>
   </tr>
   <tr>
      <td align="right">来源：</td>
      <td><input name="elog_From" type="text" id="elog_From" size="12" class="input" value="<%=HTMLEncode(blog_Edit("blog_From"))%>">&nbsp;<b>地址：
          <input name="elog_FromURL" type="text" id="elog_FromURL" size="38" class="input" value="<%=HTMLEncode(blog_Edit("blog_FromURL"))%>"></td>
   </tr>
<script language=javascript>
function Hx_accept(addaccept)
{
  if (addaccept!="")
  { document.bnews.elog_Tags.value=addaccept; }
}
</script>
   <tr>
      <td align="right">TAGs：</td>
      <td><input name="elog_Tags" type="text" id="elog_Tags" size="30" class="input" value="<%=ShowTag(blog_Edit("blog_ID"),"Edit")%>">
         <% dim rs_key,sql_key
set rs_key=Server.CreateObject("ADODB.RecordSet")
sql_key="SELECT * FROM b_tags order by tagid desc"
rs_key.open sql_key,conn,1,1%>
<select name="rs_key" id="rs_key" onchange="javascript:Hx_accept(this.options[this.selectedIndex].value);" class="input">
 <%if rs_key.bof and rs_key.eof then
     response.Write("<option value='MBLOG'>没有TAGs</option>")
  else 
     response.Write (" <option value=''>选择已有TAG</option>")
  do Until rs_key.eof 
     response.Write (" <option value="&rs_key(1)&">"&rs_key(1)&"</option>")
  rs_key.movenext
  loop
  end if%></select> 多个Tag 用 | 分隔</td>
    </tr>
    <tr>
       <td align="right" valign="top">内容：</td>
        <td>
           <table width="98%" border="0" cellspacing="0" cellpadding="2">
             <tr>
               <td>
                 <input name="elog_DisSM" type="checkbox" id="elog_DisSM" value="1" <%IF blog_Edit("blog_DisSM")=1 Then Response.Write("checked")%>>禁止表情
                 <input name="elog_DisUBB" type="checkbox" id="elog_DisUBB" value="1" <%IF blog_Edit("blog_DisUBB")=1 Then Response.Write("checked")%>>禁止UBB
                 <input name="elog_DisIMG" type="checkbox" id="elog_DisIMG" value="1" <%IF blog_Edit("blog_DisIMG")=1 Then Response.Write("checked")%>>禁止图片
                 <input name="elog_AutoURL" type="checkbox" id="elog_AutoURL" value="1" <%IF blog_Edit("blog_AutoURL")=1 Then Response.Write("checked")%>>识别链接
                 <input name="elog_AutoKEY" type="checkbox" id="elog_AutoKEY" value="1" <%IF blog_Edit("blog_AutoKEY")=1 Then Response.Write("checked")%>>识别关键字</td>
             </tr>
             <tr>
                <td width="100%"><!--#include file="ubbget.asp" --></td>
             </tr>
           </table>
           <table width="98%" border="0" cellpadding="0" cellspacing="0">
             <tr valign="top">
                <td><textarea name="message" style="width:100%" rows="12" wrap="VIRTUAL" id="Content" onSelect="javascript: storeCaret(this);" onClick="javascript: storeCaret(this);" onKeyDown="javascript: ctlent();" onKeyUp="javascript: storeCaret(this);" class="input"><%=EditDeHTML(blog_Edit("blog_Content"))%></textarea></td>
             </tr>
           </table></td></tr>
                  <tr>
                    <td align="right">表情：<img alt='点击弹开所有表情图' onclick='opencat(Emot_open)' style='CURSOR: hand' src='img/info.gif' hspace='0' align='absmiddle'></td>
                    <td width="500" id='Emot_open' style='display: none' bgcolor="#FFFFFF">
                       <%Dim emot_Nums,emot_i
			emot_Nums=Ubound(Arr_Emot,2)
			TempVar=""
			For emot_i=0 To emot_Nums
				Response.Write(TempVar&"<img style=""cursor:hand;"" onclick=""AddText('"&Arr_Emot(2,emot_i)&"');"" src=""img/blog/Emot/"&Arr_Emot(1,emot_i)&""">")
				TempVar=" "
			Next%></td>
                  </tr>
                  <tr>
                    <td align="right">附件：</td>
                    <td><iframe border="0" frameBorder="0" frameSpacing="0" height="23" marginHeight="0" marginWidth="0" noResize scrolling="no" width="100%" vspale="0" src="blog_upload.asp"></iframe></td>
                  </tr>
                  <tr align="center">
                    <td colspan="2">
                     <input name="eblog_ID" type="hidden" id="eblog_ID" value="<%=blog_Edit("blog_ID")%>">
                     <input name="editBlog" type="hidden" value="ok">
                     <input name="topicsubmit" type="submit" value="确定编辑" onClick="this.disabled=true;document.bnews.submit();" class="input">&nbsp;
                     <input name="Reset" type="reset" id="Reset" value="重置编辑" class="input"> [可按 Ctrl+Enter 发布] </td>
                  </tr>
               </form>
          </table>
      <BR><%
          blog_Edit.Close
          Set blog_Edit=Nothing
       End IF
   End IF
End IF
end sub
sub blog_comm()
Dim blog_ID,Guest_IP,blog_Code
Guest_IP=Replace(Request.ServerVariables("HTTP_X_FORWARDED_FOR"),"'","")
If Guest_IP=Empty Then Guest_IP=Replace(Request.ServerVariables("REMOTE_ADDR"),"'","")
blog_ID=Request.Form("blog_ID")
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
Response.Write("<script language=javascript>alert('你提交的路径有误，禁止从站点外部提交数据请不要乱改参数！');this.location.href='http://www.ynsky.com.cn/';</script>") 
response.end
end if
hx_Inf = split(hx_In,"|")
If Request.Form<>"" Then
	For Each hx_Post In Request.Form
		For hx_Xh=0 To Ubound(hx_Inf)
			If Instr(LCase(Request.Form(hx_Post)),hx_Inf(hx_Xh))<>0 Then
				Response.Write "<Script Language=JavaScript>alert('对不起，你发表的内容中包含系统禁止字符！');javascript :history.back();</Script>"
				Response.End
			End If
		Next
	Next
End If
IF Request("blog_Code")=Empty or IsInteger(Request("blog_Code"))=False Then 
     blog_Code=0
else
     blog_Code=Request("blog_Code")
End IF
IF int(blog_Code)<>int(Session("GetCode")) then
     Response.Write("<script language=javascript>alert('请输入正确的认证码！');javascript :history.back();</script>") 
     Response.End 
End If
IF IsInteger(blog_ID)=False or blog_ID=Empty or request.Form("PostBlogc")<>"ok" Then
     Response.Write "<Script Language=JavaScript>alert('对不起，请指定操作对象！');javascript :history.back();</Script>"
     Response.End
elseIF trim(Request.Form("message"))=Empty OR trim(Request.Form("comm_memName1"))=Empty Then
     Response.Write "<Script Language=JavaScript>alert('对不起，你的大名和评论内容不能为空！');javascript :history.back();</Script>"
     Response.End
elseIF Len(Request.Form("comm_memName1"))>12 OR Len(Request.Form("message"))>600 Then
     Response.Write "<Script Language=JavaScript>alert('对不起，你的大名大于12字符或评论内容大于600字符！');javascript :history.back();</Script>"
     Response.End
ElseIF DateDiff("n",Request.Cookies("HxBlog")("commPost"),Now())<2 Then
     Response.Write("<script language=javascript>alert('你发表评论速度太快了！');javascript :history.back();</script>") 
     Response.Cookies("HxBlog")("commpost")=Now()
     Response.End
Else
	Dim chk_Comm,IsOK
	Set chk_Comm=Conn.ExeCute("SELECT blog_DisComment,blog_IsShow FROM b_Content WHERE blog_ID="&clng(blog_ID))
	IF chk_Comm.EOF AND chk_Comm.BOF Then
		IsOK=1
	Else
		IF chk_Comm(0)=True OR chk_Comm(1)=False Then
			IsOK=2
		End IF
	End IF
        IF IsOK=1 Then
                Response.Write "<Script Language=JavaScript>alert('对不起，你所评论的日志不存在！');javascript :history.back();</Script>"
                Response.End
        ElseIF IsOK=2 Then
                Response.Write "<Script Language=JavaScript>alert('对不起，你所评论的日志不允许发表评论！');javascript :history.back();</Script>"
                Response.End
	Else
                Dim comm_Content,comm_memName,comm_memName1,comm_memName2,comm_DisSM,comm_DisUBB,comm_DisIMG,comm_AutoURL,comm_AutoKEY
	        comm_Content=CheckStr(Request.Form("message"))
	        comm_memName1=CheckStr(Request.Form("comm_memName1"))
                comm_memName2=CheckStr(Request.Form("comm_memName2"))
                IF comm_memName2<>Empty and comm_memName2=comm_memName1 Then
                    comm_memName=comm_memName2
                Else
                    comm_memName="[匿名]"&comm_memName1
                End IF
	        comm_DisSM=Request.Form("comm_DisSM")
	        comm_DisUBB=Request.Form("comm_DisUBB")
	        comm_DisIMG=Request.Form("comm_DisIMG")
	        comm_AutoURL=Request.Form("comm_AutoURL")
	        comm_AutoKEY=Request.Form("comm_AutoKEY")
	        IF comm_DisSM=Empty Then comm_DisSM=0
	        IF comm_DisUBB=Empty Then comm_DisUBB=0
	        IF comm_DisIMG=Empty Then comm_DisIMG=0
	        IF comm_AutoURL=Empty Then comm_AutoURL=0
	        IF comm_AutoKEY=Empty Then comm_AutoKEY=0
	        Conn.ExeCute("INSERT INTO b_review(blog_ID,comm_Content,comm_Author,comm_DisSM,comm_DisUBB,comm_DisIMG,comm_AutoURL,comm_AutoKEY,comm_PostIP) VALUES ("&blog_ID&",'"&comm_Content&"','"&comm_Memname&"',"&comm_DisSM&","&comm_DisUBB&","&comm_DisIMG&","&comm_AutoURL&","&comm_AutoKEY&",'"&Guest_IP&"')")
                Conn.ExeCute("UPDATE b_Content SET blog_CommNums=blog_CommNums+1 WHERE blog_ID="&clng(blog_ID))
                Response.Cookies("HxBlog")("commpost")=Now()
                Response.Write "<Script Language=JavaScript>alert('评论发表成功！');this.top.location.href='showblog.asp?blog_id="&blog_ID&"';</Script>"
                Response.End
        End IF
End IF
end sub
sub blog_delcomm()
IF IsInteger(Request.QueryString("commID"))=False OR IsInteger(Request.QueryString("blogID"))=False Then
    Response.Write "<Script Language=JavaScript>alert('对不起，参数非法错误！');javascript :history.back();</Script>"
    Response.End
Else
    Dim chk_Author,dele_commID,dele_blogID
    dele_commID=clng(Request.QueryString("commID"))
    dele_blogID=clng(Request.QueryString("blogID"))
    Set chk_Author=Conn.ExeCute("SELECT blog_Author FROM b_Content WHERE blog_ID="&dele_blogID)
    IF chk_Author.EOF AND chk_Author.BOF Then
	Response.Write "<Script Language=JavaScript>alert('对不起，参数非法错误！');javascript :history.back();</Script>"
        Response.End
    Else 
        IF Not (SupAdmin=true OR (checkmember=True And Hx66_name=chk_Author(0))) Then
              Response.Write "<Script Language=JavaScript>alert('对不起，你没有权限删除评论！');javascript :history.back();</Script>"
              Response.End
	Else
              Dim dele_Comm
	      Set dele_Comm=Conn.ExeCute("SELECT blog_ID,comm_Author FROM b_review WHERE comm_ID="&dele_commID)
	      IF dele_Comm.EOF AND dele_Comm.BOF Then
                  Response.Write "<Script Language=JavaScript>alert('对不起，没有找到指定评论！');javascript :history.back();</Script>"
                  Response.End
	      Else
                  Conn.Execute("DELETE * FROM b_review WHERE comm_ID="&dele_commID)
                  Conn.ExeCute("UPDATE b_Content SET blog_CommNums=blog_CommNums-1 WHERE blog_ID="&dele_blogID)
                  Response.Write "<Script Language=JavaScript>alert('删除评论成功！');this.top.location.href='showblog.asp?blog_id="&dele_blogID&"';</Script>"
                  Response.End
             End IF
        End IF
    End IF
End IF
end sub
%>