%@ language=VBScript %>
<%
call index()
sub index()
if Request("menu") = "replyadd" then
call replyadd()
end if
%>
<%=gbook_name%>--站长回复
本回复为前卫本人之用,如要留言请点击此图标->
<%
call htmlend()
Response.End
end sub
sub replyadd()
dim password,reply,replyid
password = Request.form("password")
reply = htmlencode2(trim(Request.form("reply")))
replyid = Request.form("replyid")
save = Request.form("save")
if replyid = "" then
message=message&"对不起,你的回复ID号不能为空!\n"
end if
sql = "select * from bqw where bqwid="&replyid
Set Rs = Server.CreateObject("ADODB.Recordset")
Rs.open sql,conn,1,1
if Rs.eof and Rs.bof then
message=message&"对不起,你的回复ID号不存在!\n"
end if
Rs.close
if password <> passwords then
message=message&"您的管理口令不正确!\n"
end if
if reply = "" then
message=message&"回复内容不能为空!\n"
end if
if reply <>"" and len(reply)> bodymax then
message=message&"对不起,回复字数不能超过 "&bodymax&" 字,谢谢!\n"
end if
if message <> "" then
call error(""&message&"")
Response.end
else
if save <> "" then
Response.cookies("password") = password
Response.cookies("save") = save
else
Response.cookies("password") = ""
Response.cookies("save") = ""
end if
sql = "select * from reply"
Rs.open sql,conn,3,2
Rs.addnew
Rs("reply")=reply
Rs("replytime")=now
Rs("replyid")=replyid
Rs.update
Rs.close
conn.close
set Rs = nothing
set conn = nothing
Response.redirect "index.asp"
Response.End
end if
end sub
%>