mode.aspx

开发环境：VS2005、C#、.net2.0、Access、AJAX引擎是自己写的

        string PSW = Request["PSW"];
        string validate = Request["Validate"];
        if (validate.ToLower().CompareTo(Convert.ToString(Session["imagenumber"]).ToLower()) != 0)
        {
            return "validateError";
        }
        if (adminID.CompareTo("") == 0 || PSW.CompareTo("") == 0)
        {
            return clsFct.errorMsg("登陆信息不能为空。");
        }
        if (clsFct.CheckBidStr(adminID) || clsFct.CheckBidStr(PSW))
        {
            return clsFct.errorMsg("警告！禁止输入非法字符。");
        }
        PSW = clsFct.EncryptStr(PSW, "MD5");
        string StrSql = "select * from admin where adminid='" + adminID + "' and adminPSW='" + PSW + "'";
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        OleDbCommand MyCmd = new OleDbCommand(StrSql, MyConn);
        try
        {
            MyCmd.Connection.Open();
            OleDbDataReader Dr = MyCmd.ExecuteReader();
            if (Dr.Read())
            {
                MyCmd.Connection.Close();
                Session["Admin"] = "True";
                return "loginTrue";
            }
            else
            {
                return "loginError";
            }
        }
        catch
        {
            return clsFct.errorMsg("登陆失败,请重试！");
        }
    }
    
    //********************
    //** 保存新增的留言 **
    //********************
    public string saveNewMsg()
    {
        if (g_stop == 1 && Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            return "msgStop";
        }
        string NewMsgHtml="";
        string Name = Request["Name"];
        string Face = Request["Face"];
        string QQ = Request["QQ"];
        string Email = Request["Email"];
        string Http = Request["Http"];
        string Head = Request["Head"];
        string Content = Request["Content"];
        string msgType = Request["Type"];
        if (Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            if (msgType.CompareTo("0") != 0 && msgType.CompareTo("1") != 0)
            {
                return clsFct.errorMsg("错误！禁止输入非法数据。");
            }
        }
        if (Name.CompareTo("") == 0 || Face.CompareTo("") == 0 || Head.CompareTo("") == 0 || Content.CompareTo("") == 0)
        {
            return clsFct.errorMsg("* 内容为必填项，请填写完整后重试！");
        }
        if (QQ.CompareTo("") != 0)
        {
            if (QQ.Length > 15)
            {
                return clsFct.errorMsg("QQ长度超过规定的限度，请不要超过15个字符！");
            }
            else if (!clsFct.IsNumber(QQ))
            {
                return clsFct.errorMsg("QQ必须是数字，请填写正确后重试！");
            }
        }
        if (Email.CompareTo("")!=0)
        {
            if (Email.Length > 50)
            {
                return clsFct.errorMsg("Email长度超过规定的限度，请不要超过50个字符！");
            }
            else if (!clsFct.IsValidEmail(Email))
            {
                return clsFct.errorMsg("Email格式错误，请填写正确后重试！");
            }
        }
        if (Http.CompareTo("") != 0 && Http.CompareTo("http://") != 0)
        {
            if (Http.Length > 80)
            {
                return clsFct.errorMsg("主页Url长度超过规定的限度，请不要超过80个字符！");
            }
            else if (!clsFct.IsValidUrl(Http))
            {
                return clsFct.errorMsg("主页Url格式错误，请填写正确后重试！");
            }
        }
        if (Head.Length > 28)
        {
            return clsFct.errorMsg("主题长度超过规定的限度，请不要超过28个字！");
        }
        if (Content.Length > Convert.ToInt32(g_contentMaxLen))
        {
            return clsFct.errorMsg("主题长度超过规定的限度，请不要超过" + g_contentMaxLen + "个字！");
        }
        if (Http.CompareTo("http://") == 0)
        {
            Http = ""; 
        }
        string Time = DateTime.Now.ToString();
        string StrSql = "Select * From book";
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            OleDbCommandBuilder oCB = new OleDbCommandBuilder(odAdapt);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataRow DR = DS.Tables[0].NewRow();
            DR["name"] = Name;
            DR["face"] = Face;
            DR["qq"] = QQ;
            DR["email"] = Email;
            DR["http"] = Http;
            DR["head"] = Head;
            DR["content"] = Content;
            DR["msgtime"] = Time;
            DR["type"] = msgType;
            DS.Tables[0].Rows.Add(DR);
            odAdapt.Update(DS);
            MyConn.Close();
            NewMsgHtml = "msgAdded";
        }
        catch
        {
            return clsFct.errorMsg("留言失败,请重试！");
        }
        return NewMsgHtml;
    }
    
    //********************
    //** 保存修改的留言 **
    //********************
    public string saveEditMsg()
    {
        if(Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            return "loginFalse";
        }
        string Head = Request["Head"];
        string Content = Request["Content"];
        string id = Request.QueryString["id"];
        if (!clsFct.IsNumber(id) || id.CompareTo("") == 0)
        {
            return clsFct.errorMsg("警告！禁止输入非法数据。");
        }
        if (Head.CompareTo("") == 0 || Content.CompareTo("") == 0)
        {
            return clsFct.errorMsg("主题和内容不能为空，请填写完整后重试！");
        }
        string StrSql = "Select * From book where id=" + id;
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            OleDbCommandBuilder oCB = new OleDbCommandBuilder(odAdapt);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataTable DT = DS.Tables[0];
            DT.Rows[0]["head"] = Head;
            DT.Rows[0]["Content"] = Content;
            odAdapt.Update(DS);
            MyConn.Close();
            return "msgEdited" + id;
        }
        catch
        {
            return clsFct.errorMsg("修改留言失败,请重试！");
        }
    }

    //********************
    //**  保存留言回复  **
    //********************
    public string saveReply()
    {
        if(Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            return "loginFalse";
        }
        string Reply = Request["Reply"];
        string id = Request.QueryString["id"];
        if (!clsFct.IsNumber(id) || id.CompareTo("") == 0)
        {
            return clsFct.errorMsg("警告！禁止输入非法数据。");
        }
        string StrSql = "Select * From book where id=" + id;
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            OleDbCommandBuilder oCB = new OleDbCommandBuilder(odAdapt);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataTable DT = DS.Tables[0];
            DT.Rows[0]["reply"] = Reply;
            odAdapt.Update(DS);
            MyConn.Close();
            return "msgReplyed" + id;
        }
        catch
        {
            return clsFct.errorMsg("留言回复失败,请重试！");
        }
    }

    //****************
    //**  删除留言  **
    //****************
    public string delMsg()
    {
        if(Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            return "loginFalse";
        }
        string id = Request.QueryString["id"];
        if (!clsFct.IsNumber(id) || id.CompareTo("") == 0)
        {
            return clsFct.errorMsg("警告！禁止输入非法数据。");
        }
        string StrSql = "Delete * From book where id=" + id;
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        OleDbCommand myCmd = new OleDbCommand(StrSql,MyConn);
        try
        {
            MyConn.Open();