qss.asp

网佳网络办公系统（以下简称OA）是一套基于B/S模式的无纸化办公系统。[显著特点：无须安装客户端] 主要功能模块：管理 公文 车辆 通知 档案 值班 人事 审批 仓库 主界面 软件下载 个

<%
'请杀手
function qss(fn1,from1,to1)
    if InStr(fn1,"'")<>0 or InStr(fn1,"`")<>0 or InStr(fn1,"=")<>0 or InStr(fn1,"-")<>0 then 
       Response.Write "<script language=JavaScript>{alert('你想做什么？想捣乱吗？！');}</script>"
       Response.End
       exit function
    end if
    if session("mypai")="六扇门" then       
        Response.Write "<script language=JavaScript>{alert('官府的人还请杀手?');}</script>"
       Response.End
       exit function
    end if
if session("mypai")="天网" then       
        Response.Write "<script language=JavaScript>{alert('你自己就是杀手啊');}</script>"
       Response.End
       exit function
    end if
  if session("hxf_u_grade")<3 then
       Response.Write "<script language=JavaScript>{alert('你的等级太低了，需要3级才能请杀手！');}</script>"
       Response.End
       exit function
    end if
    if to1="大家" or to1=from1 then
       Response.Write "<script language=JavaScript>{alert('谁是杀手?');}</script>"
       Response.End
       exit function
    end if
    if fn1=from1 then
       Response.Write "<script language=JavaScript>{alert('自己杀自己?');}</script>"
       Response.End
       exit function
    end if
Set conn=Server.CreateObject("ADODB.CONNECTION")
Set rs=Server.CreateObject("ADODB.RecordSet")
shashou=Application("hg_connstr")
conn.open shashou
sql="select * from 杀手 where 雇用杀手='"&to1&"' and 完成='未成功'"
Set Rs=conn.Execute(sql)
if rs.eof or rs.bof then
       Set conn=Server.CreateObject("ADODB.CONNECTION")
       Set rs=Server.CreateObject("ADODB.RecordSet")
       connstr=Application("hg_connstr")
       conn.open connstr
sql="SELECT * FROM 用户 WHERE 姓名='"&fn1&"'"
Set Rs=conn.Execute(sql)
if rs.eof or rs.bof then
Response.Write "<script language=JavaScript>{alert('江湖里没这个人啊.正确格式为:/杀手 你要杀手的人');}</script>"
Response.End
exit function 
end if
if rs("门派")="六扇门" then
Response.Write "<script language=JavaScript>{alert('六扇门的人是不能杀的哦');}</script>"
Response.End
exit function 
end if
if rs("门派")="天网" then
Response.Write "<script language=JavaScript>{alert('不可能叫他自己人杀自己人吧');}</script>"
Response.End
exit function 
end if
if rs("grade")<3 then
Response.Write "<script language=JavaScript>{alert('这个等于3级的新手也值得你杀吗?');}</script>"
Response.End
exit function 
end if
if rs("通缉")=true then
Response.Write "<script language=JavaScript>{alert('通缉犯不用你去追杀,自然会有人杀他的');}</script>"
Response.End
exit function 
end if
bs=rs("姓名")
gj=rs("攻防")
yl=gj*2
sql="SELECT * FROM 用户 WHERE 姓名='" & to1 & "'"
	   Set Rs=conn.Execute(sql)
if rs("门派")<>"天网" then
       Response.Write "<script language=JavaScript>{alert('他是杀手吗?');}</script>"
       Response.End
       exit function
    end if
if rs("道德")<10000 then            
	       Response.Write "<script language=JavaScript>{alert('他道德这么低你还请他?小心拿了你的钱就闪人哦');}</script>"
        Response.End
        exit function
   end if  
if rs("魅力")<10000 then            
	       Response.Write "<script language=JavaScript>{alert('他魅力这么差你也请他?还是找一个酷点的杀手吧');}</script>"
        Response.End
        exit function
   end if
if rs("杀人数")>=5 then             
	       Response.Write "<script language=JavaScript>{alert('他今天杀人的数量已经超过了江湖规定的个数了，所以你不能再请了!');}</script>"
        Response.End
        exit function
   end if  
	   sql="SELECT * FROM 用户 WHERE 姓名='" & from1 & "'"
	   Set Rs=conn.Execute(sql)
	if rs.eof or rs.bof then
	   qss=""
	end if	  
	      if rs("银两")<yl then 
       Response.Write "<script language=JavaScript>{alert('你的银子不够啊，你所杀的人不止这个价哦!所需银两=(对方攻击X2');}</script>"
       Response.End
       exit function
    end if      				
			 qss="[<a href=javascript:parent.sw('["&from1&"]'); target=f2>"&from1 &"</a>]从口袋里掏出"&yl&"两雇用金对[<a href=javascript:parent.sw('["&to1&"]'); target=f2>"&to1&"</a>]说:帮我杀一个人<input type=button value='接受' onclick=""javascript:window.open('qssok.asp','a','width=380,height=210')"" style=""background-color:#86A231;color:FFFFFF;border: 1 double"" onMouseOver=""this.style.color='FFFF00'"" onMouseOut=""this.style.color='FFFFFF'"" name=""button2231""><input type=button value='拒绝' onclick=""javascript:window.open('qssno.asp','a','width=380,height=210')"" style=""background-color:#86A231;color:FFFFFF;border: 1 double"" onMouseOver=""this.style.color='FFFF00'"" onMouseOut=""this.style.color='FFFFFF'"" name=""button223"">"	
Application("qss_t")=to1
Application("qss_f")=from1	
Application("qss_s")=bs
Application("qss_j")=yl	 
else
Response.Write "<script language=JavaScript>{alert('他还有任务没完成呢');}</script>"
Response.End
exit function 
end if
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing
end function
%>