%@ LANGUAGE="VBSCRIPT" %>
<%
DbPath = SERVER.MapPath("../database/topboy-2002.mdb")
Set conn = Server.CreateObject("ADODB.Connection")
conn.open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DbPath
%>
<%
result=Instr(1,request.ServerVariables("http_referer"),request.servervariables("http_host"),1)
if result = 0 or result = null then
response.redirect "manager-login.asp"
end if
if session("sid") <> "top" then
response.redirect "manager-login.asp"
end if
set rs=server.createobject("adodb.recordset")
sqltext="select * from topboy_type"
rs.open sqltext,conn,adOpenkeyset,adlockoptimistic,adcmdtext
if request("hf") = "y" then
vremark=replace(request("vremark"),vbcrlf,"
")
vremark=replace(vremark,"'","’")
sqltext="insert into topboy_message (buy,show,mdate,mtype,title,copy,price,content) values('"& request("buy") &"','"& request("show") &"',date(),'"& request("mtype") &"','"& request("title") &"', '"& request("copy") &"' ,'"& request("price") &"','"& vremark &"')"
conn.execute sqltext
response.redirect "manager-news-manage.asp"
response.end
else
%>
如: <img src="photos/china/yunnan/kunming-test-1.jpg" align="right"> |