post.jsp

这是一个用JAVA语言编写的BBS论坛程序

<%
/*
 * Copyright:  Copyright (c) 2004 
 * @author http://hi.baidu.com/lael80*/
%>
<%@ page language="java" import="java.sql.*"%>
<%!
public String UnitoGB(String UniStr){
   String gbStr="";
   try{
     byte[] tempByte=UniStr.getBytes("ISO8859_1");
     gbStr=new String(tempByte,"GB2312");
   }catch(Exception ex){gbStr="";}
   return gbStr.trim();
}
%>
<% 
response.setHeader("Pragma","No-cache"); 
response.setHeader("Cache-Control","no-cache"); 
response.setDateHeader("Expires", 0); 
%>
<%
int id=Integer.parseInt(request.getParameter("fid"));
String name=UnitoGB(request.getParameter("fname"));
String qq=UnitoGB(request.getParameter("fqq"));
String mail=UnitoGB(request.getParameter("fmail"));
String home=UnitoGB(request.getParameter("fhome"));
String tdate=UnitoGB(request.getParameter("fdate"));
String theme=UnitoGB(request.getParameter("ftheme"));
String content=UnitoGB(request.getParameter("fcontent"));
String ip=request.getRemoteAddr();

try{
  String url="jdbc:odbc:driver={Microsoft Access Driver (*.mdb)};DBQ="+application.getRealPath("/flash/flash.mdb");
  Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
  Connection con=DriverManager.getConnection(url);
  Statement stmt=con.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
  String sql="";
  if(id==0){
    sql="insert into book(name,qq,mail,home,theme,content,tdate,ip) values('"+name+"','"+qq+"','"+mail+"','"+home+"','"+theme+"','"+content+"','"+tdate+"','"+ip+"')";
  }else{
    content="[Administrator%20Edit:"+tdate+"]%0D"+content;
    sql="update book set name='"+name+"',qq='"+qq+"',mail='"+mail+"',home='"+home+"',theme='"+theme+"',content='"+content+"' where id="+id;
  }
  int result=stmt.executeUpdate(sql);
  if(stmt!=null)stmt.close();
  if(con!=null)con.close();

  out.println("<?xml version='1.0' encoding='gb2312'?>");
  out.println("<book>");
  out.println("<pxml result='"+result+"'/>");
  out.println("</book>");
}catch(SQLException e){}
%>