%
' ############################ 留言本设定部分 (注意以下设定部分的文字中不能出现引号,否则会出错) ##############################
inc_title = "疭称钉痙ē狾" '留言本标题
inc_title_2 = "叫糶癸疭称钉種ǎ┪拜肈" '主页上方的一句话
inc_pagesize = 10 '每页显示留言数,默认为15
inc_adminname = "tszwing" '超管用户名
inc_adminpass = "c91t96z" '超管密码
inc_database = "gbook.mdb" '数据库名称,要与本程序放在同一个目录下
' ############################ 留言本设定部分结束 ##############################
Set ConnObj = Server.CreateObject("ADODB.Connection")
ConnObj.Open "Provider=Microsoft.Jet.Oledb.4.0;Data Source="&Server.MapPath(inc_database)
Set RSObj = Server.CreateObject("ADODB.Recordset")
'定义一个处理引号错误的函数
FUNCTION FixQuotes( theString )
FixQuotes = TRIM ( REPLACE(REPLACE(REPLACE(theString, ">", "" ), "<", "" ), "'", "''" ) )
END FUNCTION
%>
<%=inc_title%>
<%
'管理员登录界面开始
If Request.QueryString("admin") = 1 Then
'判断是否退出
If Request.QueryString("admin_logout") = 1 Then
Session.Abandon
Response.Redirect("index.asp")
End if
If Request.form("admin_login") <> 1 Then
%>
<%
Else
If (FixQuotes(Request.form("adminname")) <> inc_adminname) or (FixQuotes(Request.form("adminpass")) <> inc_adminpass) Then
Session.Abandon
Response.Redirect("index.asp")
Else
Session("SESSION_ADMIN") = 1
Response.Redirect("index.asp")
End if
End if
'管理员登录界面结束
'判断管理员是否已经登录
If Session("SESSION_ADMIN")=1 Then
'判断是否回复留言或删除
If (Request.QueryString("admin_updata") = 1) or (Request.QueryString("admin_del") <> "") Then
If Request.QueryString("admin_updata") = 1 Then
updata_id = Request.QueryString("admin_updata_id")
SQL = "UPDATE [GBOOK] SET GBOOK_ADMIN ='" & FixQuotes(Request.form("ADMIN_MESSAGE_" & updata_id)) & "',GBOOK_ADMINDATE='" & DATE() & "' WHERE GBOOK_ID ="& updata_id
ConnObj.Execute(SQL)
Response.Redirect("index.asp")
Else
If Request.QueryString("admin_del") <> "" Then
SQL = "DELETE FROM [GBOOK] WHERE GBOOK_ID =" & Request.QueryString("admin_del")
ConnObj.Execute(SQL)
Response.Redirect("index.asp")
Else
Response.Write("ERROR!!!!!!")
Response.End
End if
End if
End if
End if
'判断管理员是否登录结束
Else
'处理新留言开始
If Request.form("Send") = 1 and Trim(Request.form("NAME")) <> "" and Trim(Request.form("MESSAGE")) <> "" Then
SQL = "INSERT INTO [GBOOK] (GBOOK_NAME,GBOOK_SEX,GBOOK_MAIL,GBOOK_WEB,GBOOK_MESSAGE) VALUES ('" & FixQuotes(Request.form("NAME")) & "','" & Request.form("SEX") & "','" & FixQuotes(Request.form("EMAIL")) & "','" & FixQuotes(Request.form("WEB")) & "','" & FixQuotes(Request.form("MESSAGE")) & "')"
ConnObj.Execute(SQL)
Response.Redirect("index.asp")
Response.End
End if
'处理新留言结束
'####################### 以下代码显示主页面内容 ##################
SQL = "SELECT * FROM [GBOOK] ORDER BY GBOOK_ID DESC"
RSObj.Open SQL,ConnObj,1,3
If Not RSObj.Eof Then
'设置分页显示
If inc_pagesize = "" or inc_pagesize = 0 Then pagesize = 15
RSObj.pagesize = inc_pagesize
Page_count = RSObj.Pagecount
If Request("Page") = "" or Request("Page")<= 0 Then
Page = 1
Else
If Request("Page") < Page_count Then
Page = RSObj.Pagecount
Else
Page = Request("Page")
End if
End if
RSObj.AbsolutePage = Page
End if
%>
<% p_count = 0
Do While Not RSObj.Eof and p_count < cINT(inc_pagesize)
%>
| ﹎ <%=RSObj("GBOOK_NAME")%> |
┦
<%
If RSObj("GBOOK_SEX") <> "" Then
Response.Write(RSObj("GBOOK_SEX"))
Else
Response.Write("unknow")
End if
%>
|
<%
If RSObj("GBOOK_MAIL") <> "" Then
%>
" title="Mail to:<%=RSObj("GBOOK_MAIL")%>">
筿秎
<%
End if
%>
|
<%
If RSObj("GBOOK_WEB") <> "" Then
%>
" target="_blank" title="<%=RSObj("GBOOK_WEB")%>">
呼
<%
End if
%>
|
| 痙ēず甧 <%=REPLACE(RSObj("GBOOK_MESSAGE"),">","")%> (<%=RSObj("GBOOK_DATE")%>) |
<%
If (RSObj("GBOOK_ADMIN") <> "") and (Session("SESSION_ADMIN")<> 1) Then
%>
| 滦 <%=RSObj("GBOOK_ADMIN")%> (<%=RSObj("GBOOK_ADMINDATE")%>) |
<%
Else
'以下是回复留言代码
If Session("SESSION_ADMIN") = 1 Then
GBOOK_ID = RSObj("GBOOK_ID")
Response.Write("")
End if
'回复代码结束
End if
%>
<% p_count = p_count + 1
RsObj.MoveNext
Loop
%>
|
<%
If Not Page <= 1 Then
%>
材
/
<%
End if
%>
<%
If Not Page <= 1 Then
%>
/
<%
End if
%>
<%
If Page_count <> cINT(Page) Then
%>
/
<%
End if
%>
<%
If Page_count <> cINT(Page) Then
%>
程
/
<%
End if
%>
<%=RSObj.Recordcount%> 絞痙ē
<%
If page_count <> 0 and Page <> 0 Then
%>
<%=Page%>/<%=Page_count%>
<%
End if
%>
|
.恨瞶.
セ玂痙埃痙ēぇち舦