18.asp

网佳网络办公系统（以下简称OA）是一套基于B/S模式的无纸化办公系统。[显著特点：无须安装客户端] 主要功能模块：管理 公文 车辆 通知 档案 值班 人事 审批 仓库 主界面 软件下载 个

<%
'监禁
function jjin(fn1,from1,to1)
    if InStr(fn1,"'")<>0 or InStr(fn1,"`")<>0 or InStr(fn1,"=")<>0 or InStr(fn1,"-")<>0 or InStr(fn1,",")<>0 then 
         Response.Write "<script language=JavaScript>{alert('你想做什么？想捣乱吗？！');}</script>"
         Response.End
         exit function
    end if
    if fn1="" then
         jjin="[江湖]对[<a href=javascript:parent.sw('["&from1&"]'); target=f2>" & from1 & "</a>]说：说个[监禁]的原因好吗？？？格式:/监禁 捣乱，劝告不听...."
         exit function
    end if
	i=isin(to1)
	if i=999 then
		 jjin="监禁失败！"
		 exit function
	end if
    if to1=from1 or to1="大家" then
		 jjin="[官府]对[<a href=javascript:parent.sw('["&from1&"]'); target=f2>" & from1 & "</a>]说：你是不是有病呀，自己监禁自己？"
         exit function
    end if
         Set conn=Server.CreateObject("ADODB.CONNECTION")
         Set rs=Server.CreateObject("ADODB.RecordSet")
         connstr=Application("hg_connstr")
         conn.open connstr
	     sql="SELECT grade FROM 用户 WHERE 姓名='" & from1 & "' and 门派='六扇门' and grade>=10"
	     Set Rs=conn.Execute(sql)	     
	if rs.eof or rs.bof then
		 jjin="[官府]对[<a href=javascript:parent.sw('["&from1&"]'); target=f2>" & from1 & "</a>]说：你不是六扇门的人或者等级不够哈!"
	else
	     dj=rs("grade")
         sql="select grade,门派 from 用户 where 姓名='" & to1 & "'"
		 set rs=conn.execute(sql)
	          if dj<=rs("grade") and rs("门派")="六扇门" then
			       jjin="不能监禁同级或等级比你高的网管！"
		      else
                          	  sql="update 用户 set 状态='监' where 姓名='" & to1 & "'"
			                  conn.execute sql
			                  call boot(to1)
			                  jjin="<b>六扇门的<font color=red>["&from1&"]</font>一脚把捣乱的<font color=red>[" & to1 & "]</font>踹进了牢房，此人已被判终生监禁！<font color=009900>[原因]：" & fn1 & "</font></b>"
                			  '记录在案
                			  userip=Request.ServerVariables("REMOTE_ADDR")
				              sql="select * from logdata where 时限=true"
				              set rs=conn.execute(sql)
				              if rs.eof or rs.bof then
				              sql="INSERT INTO logdata (logtime,name,ip,opertion) VALUES ("
				              sql=sql & SqlStr(sj) & ","
				              sql=sql & SqlStr(from1) & ","
				              sql=sql & SqlStr(userip) & ","
				              sql=sql & SqlStr(jjin) & ")"
				              else
				              id=rs("id")
				              sql="update logdata set name='"&from1&"',ip='"&userip&"',opertion='"&jjin&"',logtime="&sqlstr(sj)&",时限=false where id="&id				
				              end if
				              conn.execute sql
		     end if
	end if
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing
end function
%>