mode.aspx

开发环境：VS2005、C#、.net2.0、Access、AJAX引擎是自己写的

            myCmd.ExecuteReader();
            MyConn.Close();
            return "msgDeleted";
        }
        catch
        {
            return clsFct.errorMsg("留言删除失败,请重试！");
        }
    }

    //******************
    //** 保存密码修改 **
    //******************
    public string saveEditPSW()
    {
        if (Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            return "loginFalse";
        }
        string OldPSW = Request["OldPSW"];
        string NewPSW = Request["NewPSW"];
        string NewPSW2 = Request["NewPSW2"];
        string validate = Request["Validate"];
        if (validate.ToLower().CompareTo(Convert.ToString(Session["imagenumber"]).ToLower()) != 0)
        {
            return "validateError";
        }
        if (OldPSW.CompareTo("") == 0 || NewPSW.CompareTo("") == 0 || NewPSW2.CompareTo("") == 0)
        {
            return clsFct.errorMsg("密码信息不能为空。");
        }
        if (clsFct.CheckBidStr(OldPSW) || clsFct.CheckBidStr(NewPSW) || clsFct.CheckBidStr(NewPSW2))
        {
            return clsFct.errorMsg("警告！禁止输入非法字符。");
        }
        if (NewPSW.CompareTo(NewPSW2) != 0)
        {
            return clsFct.errorMsg("确认密码错误。");
        }
        OldPSW = clsFct.EncryptStr(OldPSW, "MD5");
        string StrSql = "select * from admin where adminPSW='" + OldPSW + "'";
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        OleDbCommand MyCmd = new OleDbCommand(StrSql, MyConn);
        try
        {
            MyCmd.Connection.Open();
            OleDbDataReader Dr = MyCmd.ExecuteReader();
            if (Dr.Read())
            {
                MyCmd.Connection.Close();
            }
            else
            {
                return "oldPSWError";
            }
        }
        catch
        {
            return clsFct.errorMsg("密码修改失败,请重试！");
        }
        NewPSW = clsFct.EncryptStr(NewPSW, "MD5");
        string StrSql2 = "update admin set adminPSW='" + NewPSW + "'";
        OleDbCommand MyCmd2 = new OleDbCommand(StrSql2, MyConn);
        try
        {
            MyCmd2.Connection.Open();
            MyCmd2.ExecuteReader();
            MyCmd2.Connection.Close();
            return "PSWEdited";
        }
        catch
        {
            return clsFct.errorMsg("密码修改失败,请重试！");
        }
    }
    
    //******************
    //** 保存系统设置 **
    //******************
    public string saveSysConfig()
    {
        if (Convert.ToString(Session["Admin"]).CompareTo("True") != 0)
        {
            return "loginFalse";
        }
        string Skin = Request["Skin"];
        string Face = Request["Face"];
        string Emote = Request["Emote"];
        string RPerPage = Request["RPerPage"];
        string ContentMaxLen = Request["ContentMaxLen"];
        string LeachGutterLag = Request["LeachGutterLag"];
        string Stop = Request["Stop"];
        string Announce = Request["Announce"];
        if (RPerPage.CompareTo("") == 0 || ContentMaxLen.CompareTo("") == 0)
        {
            return clsFct.errorMsg("每页显示条数与最大留言字数不能为空！");
        }
        if (!clsFct.IsNumber(RPerPage))
        {
            return clsFct.errorMsg("每页显示条数必须为数字。");
        }
        if (!clsFct.IsNumber(ContentMaxLen))
        {
            return clsFct.errorMsg("最大留言字数必须为数字。");
        }
        string StrSql = "Select * From config";
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            OleDbCommandBuilder oCB = new OleDbCommandBuilder(odAdapt);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataTable DT = DS.Tables[0];
            DT.Rows[0]["skin"] = Skin;
            DT.Rows[0]["face"] = Face;
            DT.Rows[0]["emote"] = Emote;
            DT.Rows[0]["rPerPage"] = RPerPage;
            DT.Rows[0]["contentMaxLen"] = ContentMaxLen;
            DT.Rows[0]["leachGutterLag"] = LeachGutterLag;
            DT.Rows[0]["stop"] = Stop;
            DT.Rows[0]["Announce"] = Announce;
            odAdapt.Update(DS);
            MyConn.Close();
            return "configed";
        }
        catch
        {
            return clsFct.errorMsg("系统设置失败,请重试！");
        }
    }
    //******************
    //** 返回留言主题 **
    //******************
    public string ReturnHead()
    {
        string startValue = "";
        string id = Request.QueryString["id"];
        if (!clsFct.IsNumber(id) || id.CompareTo("") == 0)
        {
            return clsFct.errorMsg("警告！禁止输入非法数据。");
        }
        string StrSql = "Select * From book where id=" + id;
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataTable DT = DS.Tables[0];
            startValue = clsFct.Keep(clsFct.FilterBadWords(DT.Rows[0]["head"].ToString().Trim(), g_leachGutterLag), 0);
            MyConn.Close();
        }
        catch
        {
            Response.Write(clsFct.errorMsg("数据库连接失败,请重试!"));
            Response.End();
        }
        return startValue;
    }

    //******************
    //** 返回留言内容 **
    //******************
    public string ReturnContent()
    {
        string imgWidth = "285";
        string imgHeight = "400"; 
        string startValue = "";
        string id = Request.QueryString["id"];
        if (!clsFct.IsNumber(id) || id.CompareTo("") == 0)
        {
            return clsFct.errorMsg("警告！禁止输入非法数据。");
        }
        string StrSql = "Select * From book where id=" + id;
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataTable DT = DS.Tables[0];
            startValue = clsFct.ubb(clsFct.Keep(clsFct.FilterBadWords(DT.Rows[0]["content"].ToString().Trim(), g_leachGutterLag), 0), imgWidth, imgHeight, g_Emote);
            MyConn.Close();
        }
        catch
        {
            Response.Write(clsFct.errorMsg("数据库连接失败,请重试!"));
            Response.End();
        }
        return startValue;
    }

    //******************
    //** 返回留言回复 **
    //******************
    public string ReturnReply()
    {
        string startValue = "";
        string id = Request.QueryString["id"];
        if (!clsFct.IsNumber(id) || id.CompareTo("") == 0)
        {
            return clsFct.errorMsg("警告！禁止输入非法数据。");
        }
        string StrSql = "Select * From book where id=" + id;
        OleDbConnection MyConn = new OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" + Server.MapPath(g_StrConn));
        try
        {
            MyConn.Open();
            OleDbDataAdapter odAdapt = new OleDbDataAdapter(StrSql, MyConn);
            DataSet DS = new DataSet();
            odAdapt.Fill(DS);
            DataTable DT = DS.Tables[0];
            startValue = clsFct.Keep(DT.Rows[0]["reply"].ToString().Trim(),0);
            MyConn.Close();
        }
        catch
        {
            Response.Write(clsFct.errorMsg("数据库连接失败,请重试!"));
            Response.End();
        }
        return startValue;
    }
    
    //**************
    //** 注销管理 **
    //**************
    public string Logoff()
    {
        Session.Remove("Admin");
        return "Logoff";
    }
    
    //**************
    //** 更换皮肤 **
    //**************
    public string changeSkin()