editpost.asp

秘密网源代码 传闻拉了 100W风投

<!-- #include file="Setup.asp" -->
<%

HtmlTop
if CookieUserName=empty then error("您还未<a href=Login.asp?ReturnUrl="&ReturnUrl&">登录</a>")
ThreadID=RequestInt("ThreadID")
PostID=RequestInt("PostID")
Category=HTMLEncode(Request("Category"))

sql="Select * From [Wo_Threads] where ThreadID="&ThreadID&""
Rs.Open sql,Conn,1
	if Rs.eof or Rs.bof then error"<li>系统不存在该主题的资料"
	ForumID=Rs("ForumID")
	PostsTableName=Rs("PostsTableName")
	Topic=Rs("Topic")
	Category=Rs("Category")
	Tags=Rs("Tags")
	ThreadEmoticonID=Rs("ThreadEmoticonID")
Rs.close

sql="select * from [Wo_Forums] where ForumID="&ForumID&""
Set Rs=Conn.Execute(sql)
	ForumName=Rs("ForumName")
	Moderated=Rs("Moderated")
	ParentID=Rs("ParentID")
	GroupID=Rs("GroupID")
	TotalCategorys=Rs("TotalCategorys")
Rs.close
%>

<!-- #include file="Utility/ForumPermissions.asp" -->

<%
if PermissionEdit=0 then error("您的<a href=ShowForumPermissions.asp?ForumID="&ForumID&">权限</a>不够")
sql="select * from [Wo_Posts"&PostsTableName&"] where PostID="&PostID&""
Set Rs=Conn.Execute(sql)
	if Rs.eof or Rs.bof then error"<li>系统不存在该主题的资料"
	if Rs("PostAuthor")<>CookieUserName and PermissionManage=0 then error("对不起，您的权限不够！")	
	if SiteConfig("PostEditBodyAgeInMinutes")>0 and DateDiff("n", Rs("PostDate"), now())> SiteConfig("PostEditBodyAgeInMinutes") then error"<li>主题发出 "&SiteConfig("PostEditBodyAgeInMinutes")&" 分钟之后不允许再次被编辑"
	Subject=ReplaceText(""&Rs("Subject")&"","<[^>]*>","")
	Body=Rs("Body")
	PostParentID=Rs("ParentID")
Rs.close
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
if Request.ServerVariables("Request_method") = "POST" then
	color=HTMLEncode(Request.Form("color"))
	Subject=HTMLEncode(Request.Form("PostSubject"))
	Body=BodyEncode(Request.Form("Body"))
	Category=HTMLEncode(Request.Form("Category"))
	Tags=HTMLEncode(Request.Form("Tags"))
	ThreadEmoticonID=RequestInt("ThreadEmoticonID")

	if Request.Form("DisableYBBCode")<>1 then Body=YbbEncode(Body)
	if PostParentID=0 then
		if Len(Subject)<2 then Message=Message&"<li>文章主题不能小于 2 字符"
	end if
	if Len(Body)<2 then Message=Message&"<li>文章内容不能小于 2 字符"
	if len(Tags)>255 then Message=Message&"<li>标签不能大于255字符"

	if SiteConfig("DisplayEditNotes")=1 then Body=""&Body&"<p>［此主题已被 "&CookieUserName&" 在 "&now()&" 编辑过］"
	if Message<>"" then error(""&Message&"")
	sql="select * from [Wo_Posts"&PostsTableName&"] where PostID="&PostID&""
	Rs.Open sql,Conn,1,3
		if Rs("ParentID")=0 then Conn.execute("update [Wo_Threads] set Topic='"&Subject&"',Category='"&Category&"',ThreadEmoticonID="&ThreadEmoticonID&",Tags='"&Tags&"' where ThreadID="&Rs("ThreadID")&"")
		Rs("Subject")=Subject
		Rs("Body")=Body
	Rs.update
	Rs.close
	if Request.Form("UpFileID")<>"" then
		UpFileID=split(Request.Form("UpFileID"),",")
		for i = 0 to ubound(UpFileID)-1
			Conn.execute("update [Wo_PostAttachments] set Description='"&Subject&"' where UpFileID="&int(UpFileID(i))&" and UserName='"&CookieUserName&"'")
		next
	end if
	Log("修改主题成功，标题："&Subject&"，主题ID："&ThreadID&"，主题ID："&PostID&"")
	Message="<li>修改主题成功<li><a href=ShowPost.asp?ThreadID="&ThreadID&">返回主题</a><li><a href=ShowForum.asp?ForumID="&	ForumID&">返回群组</a>"
	succeed Message,"ShowForum.asp?ForumID="&ForumID&""
end if
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
%>

<table width="900"  border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td><div id="CommonBreadCrumbArea"><%ClubTree%> → <%ForumTree(ParentID)%><%=ForumTreeList%> <a href=ShowForum.asp?ForumID=<%=ForumID%>><%=ForumName%></a> → <a href="ShowPost.asp?ThreadID=<%=ThreadID%>"><%=Topic%></a> → 编辑主题</div></td>
  </tr>
</table>

<table cellspacing=1 cellpadding=0 width=900 id=CommonListArea>
<form name="form" method="post" onSubmit="return CheckForm(this);">
<input name="Body" type="hidden" value='<%=server.htmlencode(Body)%>'>
<input name="UpFileID" type="hidden">
	<TR id=CommonListTitle3>
		<TD colSpan=2>编辑主题</TD>
	</TR>
	<TR id=CommonListCell>
		<TD width="180"><B>标题</B></TD>
		<TD><INPUT type="text" maxLength="50" size="60" name="PostSubject" value='<%=Subject%>'></TD>
	</TR>

<%	if PostParentID=0 then%>
	<tr id=CommonListCell>
		<td><B>类别</B></td>
		<td>
		<SELECT name=Category size=1>
		<OPTION value="" selected>无</OPTION>
		<OPTION value="<%=Category%>" selected><%=Category%></OPTION>
<%
		if TotalCategorys<>empty then
			filtrate=split(TotalCategorys,"|")
			for i = 0 to ubound(filtrate)
				response.write "<OPTION value='"&filtrate(i)&"'>"&filtrate(i)&"</OPTION>"
			next
		end if
%>
		</SELECT> <a href="javascript:Wo_Modal.Open('Utility/AddCategory.htm', 500, 100);">添加类别</a>
		</TD>
	</TR>

	<TR id=CommonListCell>
		<TD vAlign=top align=Left><B>表情</B></TD>
		<TD><INPUT type=radio value=0 name=ThreadEmoticonID checked>无<br>
		<script language="JavaScript">
		for(i=1;i<=30;i++) {
			if (i ==<%=ThreadEmoticonID%>){IsChecked="checked"}else{IsChecked=""}
			document.write("<INPUT type=radio value="+i+" name=ThreadEmoticonID "+IsChecked+"><IMG src=images/Emotions/emotion-"+i+".gif >　")
			if (i ==10 || i ==20){document.write("<br>")}
		}
		</script></TD>
	</TR>
		
<%	end if%>

	<TR id=CommonListCell>
		<TD vAlign=top>
			<br><B>内容</B><BR>（<a href="javascript:CheckLength();">查看内容长度</a>）<BR><BR><INPUT id=DisableYBBCode name=DisableYBBCode type=checkbox value=1><label for=DisableYBBCode> 禁用YBB代码</label>
			<%if SiteConfig("UpFileOption")<>empty and PermissionAttachment=1 then%>
						<BR><BR><span id=UpFile></span><a href="javascript:Wo_Modal.Open('UploadAttachment.asp',500,150);" class="CommonTextButton">上传附件</a>
			<%end if%>
		</TD>
		<TD height=250><SCRIPT type="text/javascript" src="Editor/Post.js"></SCRIPT></TD>
	</TR>
<%if SiteConfig("DisplayPostTags")=1 and PostParentID=0 then%>
	<TR id=CommonListCell>
		<TD><b>标签<br></b>以逗号“,”分隔</TD>
		<TD><input type="text" name="Tags" size="80" value="<%=Tags%>" /></TD>
	</TR>
<%end if%>
	<TR id=CommonListCell>
		<TD align=center colSpan=2><INPUT type=submit value=" 发表 " name=EditSubmit>　<input type="Button" value=" 预览 " onclick="Preview()">　<INPUT onclick="history.back()" type="button" value=" 取消 "></TD>
	</TR>
</FORM>
</TABLE>
<div name="Preview" id="Preview"></div>
<%
HtmlBottom
%>