<%if request("action")="fkpost" then
title=trim(request.form("title"))
content=trim(left(request.form("content"),500))
if title="" then
response.write""
response.end()
end if
if content="" then
response.write""
response.end()
end if
Set rsp=server.createobject("adodb.recordset")
sql="select * from book"
rsp.open sql,conn,1,3
rsp.addnew
rsp("title")=title
rsp("content")=content
rsp.update
response.write""
end if%>
<%
page = Request.QueryString("page")
action = Request.QueryString("action")
action_e = Request.Form("action_e")
set Conn=Server.CreateObject("ADODB.Connection")
Conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq=" & Server.MapPath("datayiduo.mdb")
%>
<%if request.QueryString("action")="Check" then
sql="update words set check=true where id="&request("id")
conn.execute sql
response.Write("")
end if
%>
<%
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'主程序
Select Case action_e
Case ""
Case "Add_New"
Call Add_New_Execute()
Case "reply"
Call Reply_Execute()
Case "admin"
Call Admin_Login_Execute()
Case "EditPWD"
Call EditPWD_Execute()
Case "Edit"
Call Edit_Execute()
End Select
Call Main_Menu()
Select Case action
Case "UbbHelp"
Call UbbHelp()
Case "Admin_Login"
Call Admin_Login()
Case "Exit"
Call Exit_Admin()
Call View_Words()
Case ""
Call View_Words()
Case "Add_New"
Call Add_New()
Case "reply"
Call Reply()
Case "View_Words"
Call View_Words()
Case "admin_view"
Call View_adminWords()
Case "Delete"
Call Delete()
Call View_Words()
Case "EditPWD"
Call EditPWD()
Case "Edit"
Call Edit()
End Select
Call Copyrights()
%>
<%
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'添加一条新留言
%>
<% Sub Add_New() %>
<% End Sub %>
<%
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'管理员回复留言
%>
<% Sub Reply() %>
<% End Sub %>
<%
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
%>
<% Sub Main_Menu() %>
AddView
<% If Session("Admin")="Login" Then %>
OutCheck
<% Else %>
Manage
<% End If %>
<% If Session("Admin")="Login" Then %>
PassWord
<% End If %>
<% End Sub
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'查看留言
Sub View_Words()
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From words where check=true Order By date Desc"
Rs.Open Sql,Conn,1,1
TotalRecord=Rs.RecordCount
Rs.PageSize =6 '每页显示留言的数目
PageSize = Rs.PageSize
PageCount=Rs.PageCount
if rs.eof then
response.Write("No Message.")
response.End()
end if
If page="" Then
Rs.AbsolutePage = 1
Else
Rs.AbsolutePage = page
End If
%>
<%
rs.movenext
i=i+1
loop
Rs.Close
Set Rs = Nothing
%>
<%=TotalRecord%>Messages
Pages
<%
For m = 1 To PageCount
%>
[<%=m%>]
<%
Next
%>
<% End Sub %>
<%
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'管理员登陆接口
%>
<% Sub Admin_Login() %>
<% End Sub%>
<%
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
%>
<%
Sub Copyrights()
%>
<%
End Sub
%>
<%Sub View_adminWords()
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From words Order By date Desc"
Rs.Open Sql,Conn,1,1
TotalRecord=Rs.RecordCount
Rs.PageSize =6 '每页显示留言的数目
PageSize = Rs.PageSize
PageCount=Rs.PageCount
if rs.eof then
response.Write("No Messages.")
response.End()
end if
If page="" Then
Rs.AbsolutePage = 1
Else
Rs.AbsolutePage = page
End If
%>
<%
rs.movenext
i=i+1
loop
Rs.Close
Set Rs = Nothing
%>
<%=TotalRecord%>messages
pages
<%
For m = 1 To PageCount
%>
[<%=m%>]
<%
Next
%>
<%End Sub%>
<%Sub EditPWD()%>
<%End Sub%>
<% Sub Edit() %>
<%
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From words Where id="&Request.QueryString("id")
Rs.Open Sql,Conn,1,1
%>
<% End Sub %>
<%
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'添加新留言到数据库
Sub Add_New_Execute()
If Request.Form("name")="" Then
Response.Write " Error: input name"
Response.Write " "
Response.Write " Back
"
Response.End
End If
If Len(Request.Form("name"))>20 Then
Response.Write " Error: name over"
Response.Write " "
Response.Write " Back
"
Response.End
End If
If Request.Form("email")<>"" Then
If instr(Request.Form("email"),"@")=0 or instr(Request.Form("email"),"@")=1 or instr(Request.Form("email"),"@")=len(email) then
Response.Write " Error: email wrong"
Response.Write " "
Response.Write " back
"
Response.End
End If
End If
If Request.Form("words")="" Then
Response.Write " Error: input content"
Response.Write " "
Response.Write " back
"
Response.End
End If
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From words"
Rs.Open Sql,Conn,2,3
Rs.AddNew
Rs("name")=Request.Form("name")
Rs("web")=Request.Form("web")
Rs("email")=Request.Form("email")
Rs("words")=Request.Form("words")
Rs("pic")=Request.Form("face")
Rs("date")=Now()
Rs.Update
Rs.Close
response.Write("")
Set Rs = Nothing
End Sub
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'验证管理员登陆
Sub Admin_Login_Execute()
username = Server.HTMLEncode(Request.Form("username"))
password = Server.HTMLEncode(Request.Form("password"))
If username = "" OR password = "" Then
Response.Write " Error: UserName or PassWord wrong"
Response.Write " "
Response.Write " back
"
Response.End
End If
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From admin"
Rs.Open Sql,Conn,1,1
If username = Rs("username") AND password = Rs("password") Then
Session("Admin") = "Login"
Else
Response.Write " Error: UserName or PassWord wrong失败"
Response.Write " "
Response.Write " back
"
Response.End
End If
Rs.Close
Set Rs = Nothing
End Sub
Sub EditPWD_Execute()
oldusername=Server.HTMLEncode(Request.Form("oldusername"))
username = Server.HTMLEncode(Request.Form("username"))
username_c = Server.HTMLEncode(Request.Form("username_c"))
oldpwd = Server.HTMLEncode(Request.Form("oldpwd"))
newpwd = Server.HTMLEncode(Request.Form("newpwd"))
newpwd_c = Server.HTMLEncode(Request.Form("newpwd_c"))
If username = "" OR username_c="" Then
Response.Write "input oldusername"
Response.End
End If
If oldpwd = "" OR newpwd = "" OR newpwd_c="" Then
Response.Write "input newusername空"
Response.End
End If
If username<>username_c Then
Response.Write "Error"
Response.End
End If
If newpwd<>newpwd_c Then
Response.Write "Error"
Response.End
End If
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From admin"
Rs.Open Sql,Conn,2,3
If Rs("password")=oldpwd And Rs("username")=oldusername Then
Rs("username")=username
Rs("password")=newpwd
Rs.Update
Else
Response.Write "Error"
Response.End
End If
Rs.Close
Set Rs = Nothing
End Sub
Sub Exit_Admin()
Session.Abandon
End Sub
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'删除数据
Sub Delete()
'删除数据
Conn.Execute("Delete * From words Where id="&Request.QueryString("id"))
End Sub
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'回复留言添加到数据库
Sub Reply_Execute()
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select reply From words Where id="&Request.Form("id")
Rs.Open Sql,Conn,2,3
Rs("reply") = Server.HTMLEncode(Request.Form("reply"))
Rs.Update
Rs.Close
Set Rs=Nothing
End Sub
Sub Edit_Execute()
Set Rs = Server.CreateObject("ADODB.RecordSet")
Sql="Select * From words Where id="&Request.Form("id")
Rs.Open Sql,Conn,2,3
Rs("words") = Server.HTMLEncode(Request.Form("words"))
Rs("reply") = Server.HTMLEncode(Request.Form("reply"))
Rs.Update
Rs.Close
Set Rs=Nothing
End Sub
Conn.Close
Set Conn = Nothing
%>
<%
function unHtml(content)
unHtml=content
if content <> "" then
unHtml=replace(unHtml,"&","&")
unHtml=replace(unHtml,"<","<")
unHtml=replace(unHtml,">",">")
unHtml=replace(unHtml,chr(34),""")
unHtml=replace(unHtml,chr(13)," ")
unHtml=replace(unHtml,chr(32)," ")
'unHtml=ubb(unHtml)
end if
end function
function ubb(content)
ubb=content
nowtime=now()
UBB=Convert(ubb,"code")
UBB=Convert(ubb,"html")
UBB=Convert(ubb,"url")
UBB=Convert(ubb,"color")
UBB=Convert(ubb,"font")
UBB=Convert(ubb,"size")
UBB=Convert(ubb,"quote")
UBB=Convert(ubb,"email")
UBB=Convert(ubb,"img")
UBB=Convert(ubb,"swf")
UBB=AutoURL(ubb)
ubb=replace(ubb,"[b]","",1,-1,1)
ubb=replace(ubb,"[/b]","",1,-1,1)
ubb=replace(ubb,"[i]","",1,-1,1)
ubb=replace(ubb,"[/i]","",1,-1,1)
ubb=replace(ubb,"[u]","",1,-1,1)
ubb=replace(ubb,"[/u]","",1,-1,1)
ubb=replace(ubb,"[blue]","",1,-1,1)
ubb=replace(ubb,"[/blue]","",1,-1,1)
ubb=replace(ubb,"[red]","",1,-1,1)
ubb=replace(ubb,"[/red]","",1,-1,1)
for i=1 to 28
ubb=replace(ubb,"{:em"&i&"}","",1,6,1)
ubb=replace(ubb,"{:em"&i&"}","",1,-1,1)
next
ubb=replace(ubb,"["&chr(176),"[",1,-1,1)
ubb=replace(ubb,chr(176)&"]","]",1,-1,1)
ubb=replace(ubb,"/"&chr(176),"/",1,-1,1)
' ubb=replace(ubb,"{;em","{:em",1,-1,1)
end function
function Convert(ubb,CovT)
cText=ubb
startubb=1
do while Covt="url" or Covt="color" or Covt="font" or Covt="size"
startubb=instr(startubb,cText,"["&CovT&"=",1)
if startubb=0 then exit do
endubb=instr(startubb,cText,"]",1)
if endubb=0 then exit do
Lcovt=Covt
startubb=startubb+len(lCovT)+2
text=mid(cText,startubb,endubb-startubb)
codetext=replace(text,"[","["&chr(176),1,-1,1)
codetext=replace(codetext,"]",chr(176)&"]",1,-1,1)
'codetext=replace(codetext,"{:em","{;em",1,-1,1)
codetext=replace(codetext,"/","/"&chr(176),1,-1,1)
select case CovT
case "color"
cText=replace(cText,"[color="&text&"]","",1,1,1)
cText=replace(cText,"[/color]","",1,1,1)
case "font"
cText=replace(cText,"[font="&text&"]","",1,1,1)
cText=replace(cText,"[/font]","",1,1,1)
case "size"
if IsNumeric(text) then
if text>6 then text=6
if text<1 then text=1
cText=replace(cText,"[size="&text&"]","",1,1,1)
cText=replace(cText,"[/size]","",1,1,1)
end if
case "url"
cText=replace(cText,"[url="&text&"]","",1,1,1)
cText=replace(cText,"[/url]","",1,1,1)
case "email"
cText=replace(cText,"["&CovT&"="&text&"]","",1,1,1)
cText=replace(cText,"[/"&CovT&"]","",1,1,1)
end select
loop
startubb=1
do
startubb=instr(startubb,cText,"["&CovT&"]",1)
if startubb=0 then exit do
endubb=instr(startubb,cText,"[/"&CovT&"]",1)
if endubb=0 then exit do
Lcovt=Covt
startubb=startubb+len(lCovT)+2
text=mid(cText,startubb,endubb-startubb)
codetext=replace(text,"[","["&chr(176),1,-1,1)
codetext=replace(codetext,"]",chr(176)&"]",1,-1,1)
'codetext=replace(codetext,"{:em","{;em",1,-1,1)
codetext=replace(codetext,"/","/"&chr(176),1,-1,1)
select case CovT
case "url"
cText=replace(cText,"["&CovT&"]"&text,""&codetext,1,1,1)
cText=replace(cText,""&codetext&"[/"&CovT&"]",""&codetext&"",1,1,1)
case "email"
cText=replace(cText,"["&CovT&"]","",1,1,1)
cText=replace(cText,"[/"&CovT&"]","",1,1,1)
case "html"
codetext=replace(codetext," ",chr(13),1,-1,1)
codetext=replace(codetext," ",chr(32),1,-1,1)
Randomize
rid="temp"&Int(100000 * Rnd)
cText=replace(cText,"[html]"&text,"代码片断如下: