4.asp

网佳网络办公系统（以下简称OA）是一套基于B/S模式的无纸化办公系统。[显著特点：无须安装客户端] 主要功能模块：管理 公文 车辆 通知 档案 值班 人事 审批 仓库 主界面 软件下载 个

<%
'坐牢
function zuolao(fn1,from1,to1)
    if InStr(fn1,"'")<>0 or InStr(fn1,"`")<>0 or InStr(fn1,"=")<>0 or InStr(fn1,"-")<>0 or InStr(fn1,",")<>0 then 
        Response.Write "<script language=JavaScript>{alert('你想做什么？想捣乱吗？！');}</script>"
        Response.End
        exit function
    end if
    if fn1="" or to1=from1 or to1="大家" then
Response.Write "<script language=JavaScript>{alert('坐牢得有理由啊,格式为/逮捕 捣乱!');}</script>"
Response.End
        exit function
    end if
	    i=isin(to1)
	if i=999 then
		zuolao="入狱失败！"
		exit function
	end if
        Set conn=Server.CreateObject("ADODB.CONNECTION")
        Set rs=Server.CreateObject("ADODB.RecordSet")
        connstr=Application("hg_connstr")
        conn.open connstr
	    sql="SELECT grade FROM 用户 WHERE 姓名='" & from1 & "' and 门派='六扇门' and grade>=8"
	    Set Rs=conn.Execute(sql)
	if rs.eof or rs.bof then
		zuolao="[官府]对[<a href=javascript:parent.sw('["&from1&"]'); target=f2>" & from1 & "</a>]说：你不是我六扇门的人或等级不够哈!"
	else
		dj=rs("grade")
		sql="select grade,门派 from 用户 where 姓名='" & to1 & "'"
		rs=conn.execute(sql)
		       if dj<=rs("grade") and rs("门派")="六扇门" then
			         zuolao="不能抓同级或等级比你高的网管坐牢！"
		       else
                     sql="select id from 卡片拥有 where 卡片名称='免罪卡' and 拥有者='"&to1&"' and 数值>0 "
                     set rs=conn.execute(sql)
                          if not(rs.eof or rs.bof) then
                          		 id=rs("ID")
			                     sql="update 卡片拥有 set 数值=数值-1 where id=" & id
			                     conn.execute sql
			                     zuolao="六扇门的人准备用根铁索套在"&to1&"的脖子上,就在此时,"&to1&"掏出身上的免罪卡说,慢着,我身上有免罪卡,嘿嘿!"
			              else
			                     sql="update 用户 set 状态='牢',登录=now()+1/144 where 姓名='" & to1 & "'"
			                     conn.execute sql
			                     call boot(to1)
			                     zuolao= "<b>六扇门的<font color=red>["&from1&"]</font>拿了根铁索套在<font color=red>[" & to1 & "]</font>的脖子上，一脚把<font color=red>[" & to1 & "]</font>踹进了牢房，呆着吧，你需要坐10分钟的牢！<font color=009900>[原因]：" & fn1 & "</font></b>"
                  				 '记录在案
                  				 userip=Request.ServerVariables("REMOTE_ADDR")
			                     sql="select * from logdata where 时限=true"
				                 set rs=conn.execute(sql)
				                 if rs.eof or rs.bof then
				                 sql="INSERT INTO logdata (logtime,name,ip,opertion) VALUES ("
				                 sql=sql & SqlStr(sj) & ","
				                 sql=sql & SqlStr(from1) & ","
				                 sql=sql & SqlStr(userip) & ","
				                 sql=sql & SqlStr(zuolao) & ")"
				                 else
				                 id=rs("id")
				                 sql="update logdata set name='"&from1&"',ip='"&userip&"',opertion='"&zuolao&"',logtime="&sqlstr(sj)&",时限=false where id="&id				
				                 end if
				                 conn.execute sql
		                 end if
		          end if
	end if
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing
end function
%>