WEB(ASP,PHP,...)

Development Platform:
HTML/CSS

Deal_user.asp：Code Content
							<!--#include file="Ku_inc/Ku_sql.asp"-->
<!--#include file="ku_inc/Ku_config.asp"-->
<!--#include file="Ku_conn.asp"-->
<!--#include file="Ku_inc/Ku_md5.asp"-->
<!--#include file="ku_inc/Ku_function.asp"-->
<!--#include file="ku_inc/inc.asp"-->
<%
if request.querystring("Action")="editheadpic" then
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if  mid(server_v1,8,len(server_v2))<>server_v2  then
Response.Write "<script>alert(""禁止外部提交，请停止你的非法行为!"");location.href=""javascript:history.back()"";</script>"
else
    userid=request.querystring("userid")
    UserPhoto=request.form("UserPhoto")
    pic=request.form("pic1")
    hpic=request.form("hpic")
  
    if hpic<>"" and pic="" then 
    Response.Write "<script>alert(""自定义头像图片请先上传！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if    
    
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from [ku_user] where id="&userid&""
    rsmsg.open sqlmsg,conn,1,3
    if (rsmsg.eof and rsmsg.bof) then
    Response.Write "<script>alert(""此用户不存在，请别恶意攻击本站!"");location.href=""javascript:history.back()"";</script>"
    else
    
    if hpic<>"" then
    rsmsg("UserPhoto")=pic
    else
    rsmsg("UserPhoto")=UserPhoto
    end if
    rsmsg.Update
    rsmsg.close
    set rsmsg=nothing
           response.Write("<script>alert(""修改成功！！"");location.href=""Gu_User.asp?guxing=headpic"";</script>")
           end if
           end if
end if
%>
<%
if request("action")="add_info" then
title=server.HTMLEncode(trim(request("biaoti")))
shenhe=server.HTMLEncode(trim(request("shenhe")))
pkind=server.HTMLEncode(trim(request("pkind")))
pgq=server.HTMLEncode(trim(request("pgq")))
class1=request.form("class1")
class2=request.form("class2") 
content=server.HTMLEncode(trim(request("neirong"))) 
pic=request.form("pic")
youxiaoqi=request.form("yxq")
username=server.HTMLEncode(trim(request("fbr"))) 
lianxiren=server.HTMLEncode(trim(request("lianxiren"))) 
tel=server.HTMLEncode(trim(request("dianhua"))) 
qq=server.HTMLEncode(trim(request("qq"))) 
email=server.HTMLEncode(trim(request("email"))) 
address=server.HTMLEncode(trim(request("dizhi"))) 
ppic=Replace(request("pic"),left(request("pic"),3),"")
    set rs=server.createobject("adodb.recordset")
    sql="select * from Gu_pinke"
    rs.open sql,conn,1,3
    rs.addnew
    rs("title")=title 
    if shenhe<>"" then
    rs("shenhe")=1
    end if
    rs("pkind")=pkind
    rs("pgq")=pgq
    rs("shi")=class1
    rs("qu")=class2
    rs("content")=content
    rs("times")=youxiaoqi
    rs("username")=username
    rs("pic")=ppic
    rs("lianxiren")=lianxiren
    rs("tel")=tel
    rs("qq")=qq
    rs("email")=email
    rs("address")=address
    rs("addtime")=now()
    rs("ip")=Request.ServerVariables("REMOTE_ADDR")
    if Ku_fl=1 then
    rs("shenhe")=1
    end if
    rs.update
    rs.close
response.Write("<script>alert(""拼客信息发布成功！！"");location.href=""Gu_user.asp?guxing=adminpk"";</script>")
end if
%>
<%
if request.querystring("Action")="kdian" then
dname=server.HTMLEncode(trim(request.form("dname")))
jieshao=server.HTMLEncode(trim(request.form("jieshao")))
gonggao=server.HTMLEncode(trim(request.form("gonggao")))
tel=server.HTMLEncode(trim(request.form("tel")))
address=server.HTMLEncode(trim(request.form("address")))
username=server.HTMLEncode(trim(request.form("username")))
leibie=request.form("leibie")
class1=request.form("class1")
class2=request.form("class2")
pic=request.form("pic")
userid=request.form("userid")
    if dname="" then 
    Response.Write "<script>alert(""店铺名称不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if class1="" then 
    Response.Write "<script>alert(""所属地没选择！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    
    if jieshao="" then 
    Response.Write "<script>alert(""店铺介绍不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if len(jianjie)>150 then 
    Response.Write "<script>alert(""简介最多150字数！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    if gonggao="" then 
    Response.Write "<script>alert(""店铺公告不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if len(gonggao)>100 then 
    Response.Write "<script>alert(""公告最多100字数！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if tel="" then 
    Response.Write "<script>alert(""联系电话不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    if address="" then 
    Response.Write "<script>alert(""店铺地址不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if pic="" then 
    Response.Write "<script>alert(""店铺图片不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    if username="" then 
    Response.Write "<script>alert(""联系人不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from shangjia "
    rsq.open sqlq,conn,1,3
    rsq.addnew
    rsq("userid")=userid
    rsq("class")=leibie    
    rsq("name")=dname
    rsq("logo")=pic
    rsq("shi")=class1
    rsq("qu")=class2        
    rsq("beizhu")=jieshao
    rsq("gonggao")=gonggao
    rsq("tel")=tel
    rsq("address")=address
    rsq("addtime")=now()
    rsq("username")=username
    if Ku_vipdown=1 then
    rsq("shenhe")=1
    end if
    rsq("addip")=Request.ServerVariables("REMOTE_ADDR")
    rsq.update
    set rsqu=server.createobject("adodb.recordset")
    sqlqu="select * from [ku_user] where id="&userid&""
    rsqu.open sqlqu,conn,1,3
    rsqu("kaidian")=1
    rsqu.update
response.redirect"Gu_User.asp?guxing=adminshop"
end if
%>
<%
if request.querystring("Action")="edian" then
id=request.querystring("id")
dname=server.HTMLEncode(trim(request.form("dname")))
jieshao=server.HTMLEncode(trim(request.form("jieshao")))
gonggao=server.HTMLEncode(trim(request.form("gonggao")))
tel=server.HTMLEncode(trim(request.form("tel")))
address=server.HTMLEncode(trim(request.form("address")))
username=server.HTMLEncode(trim(request.form("username")))
leibie=request.form("leibie")
pic=request.form("pic")
userid=request.form("userid")
class1=request.form("class1")
class2=request.form("class2")
    if dname="" then 
    Response.Write "<script>alert(""店铺名称不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if class1="" then 
    Response.Write "<script>alert(""所属地没选择！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if      
    if jieshao="" then 
    Response.Write "<script>alert(""店铺介绍不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if len(jianjie)>150 then 
    Response.Write "<script>alert(""简介最多150字数！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    if gonggao="" then 
    Response.Write "<script>alert(""店铺公告不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if len(gonggao)>100 then 
    Response.Write "<script>alert(""公告最多100字数！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if tel="" then 
    Response.Write "<script>alert(""联系电话不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    if address="" then 
    Response.Write "<script>alert(""店铺地址不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if username="" then 
    Response.Write "<script>alert(""联系人不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from shangjia where id="&id&""
    rsq.open sqlq,conn,1,3
    rsq("userid")=userid
    rsq("class")=leibie    
    rsq("name")=dname
    rsq("logo")=pic
    rsq("beizhu")=jieshao
    rsq("gonggao")=gonggao
    rsq("tel")=tel
    rsq("address")=address
    rsq("shi")=class1
    rsq("qu")=class2  
    rsq("username")=username
    rsq("addip")=Request.ServerVariables("REMOTE_ADDR")
    rsq.update
response.redirect"Gu_User.asp?guxing=adminshop"
end if
%>
<%
if request.querystring("Action")="pro" then
userid=request.querystring("userid")
did=request.querystring("did")
proname=server.HTMLEncode(trim(request.form("proname")))
price=server.HTMLEncode(trim(request.form("price")))
jianjie=server.HTMLEncode(trim(request.form("jianjie")))
pic=request.form("pic")
    if proname="" then 
    Response.Write "<script>alert(""产品名称不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if jianjie="" then 
    Response.Write "<script>alert(""产品介绍不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
   
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from Gu_pro "
    rsq.open sqlq,conn,1,3
    rsq.addnew
    rsq("userid")=userid
    rsq("did")=did    
    rsq("name")=proname
    rsq("pic")=pic
    rsq("content")=jianjie
    rsq("price")=price
    rsq("tel")=tel
    rsq("addtime")=now()
    rsq("shenhe")=1
    rsq.update
response.redirect"Gu_User.asp?guxing=adminshop"
end if
%>
<%
if request.querystring("Action")="delpro" then
id=request.querystring("id")
delsqlrebbs="delete from gU_pro where id="&id
    conn.execute(delsqlrebbs)        
    
    response.redirect"Gu_User.asp?guxing=adminshop"
end if
%>
<%
if request.querystring("Action")="epro" then
id=request.querystring("id")
did=request.querystring("did")
proname=server.HTMLEncode(trim(request.form("proname")))
price=server.HTMLEncode(trim(request.form("price")))
jianjie=server.HTMLEncode(trim(request.form("jianjie")))
pic=request.form("pic")
    if proname="" then 
    Response.Write "<script>alert(""产品名称不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if jianjie="" then 
    Response.Write "<script>alert(""产品介绍不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
   
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from gu_pro where id="&id&" "
    rsq.open sqlq,conn,1,3
   
    rsq("name")=proname
    rsq("pic")=pic
    rsq("content")=jianjie
    rsq("price")=price
    rsq("tel")=tel
    rsq.update
response.redirect"Gu_User.asp?guxing=adminshop"
end if
%>
<!----->
<%
if request.querystring("Action")="cquan" then
username=request.form("username")
qname=request.form("qname")
leibie=request.form("leibie") 
beizhu=server.HTMLEncode(trim(request.form("beizhu")))
pic=request.form("pic")
shi=request.form("class1")
qu=request.form("class2")
    if qname="" then 
    Response.Write "<script>alert(""圈子名称不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if shi="" then 
    Response.Write "<script>alert(""圈子所属地区不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if     
    
    if len(qname)>8 then 
    Response.Write "<script>alert(""圈子名称必须小于8个字！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if  
    if beizhu="" then 
    Response.Write "<script>alert(""圈子简介不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from [quan] "
    rsq.open sqlq,conn,1,3
    rsq.addnew
    rsq("cjr")=username
    rsq("name")=qname
    rsq("shi")=shi
    rsq("qu")=qu
    rsq("lb")=leibie
    rsq("beizhu")=beizhu
    rsq("qnrs")=rsq("qnrs")+1
    rsq("addtime")=now()
    rsq("logo")=pic
    rsq.update
    
    set rsml=server.createobject("adodb.recordset")
    sqll="select * from quan_ren"
    rsml.open sqll,conn,1,3
    rsml.addnew
    rsml("qid")=rsq("id")
    rsml("sqr")=username
    rsml("addtime")=now()
    rsml.update
    rsml.close    
    
    
    response.redirect"Gu_User.asp?guxing=adminquan"
end if
%>
<%
if request.querystring("Action")="equan" then
qid=request.querystring("qid")
username=request.form("username")
qname=request.form("qname")
leibie=request.form("leibie") 
beizhu=server.HTMLEncode(trim(request.form("beizhu")))
pic=request.form("pic")
shi=request.form("class1")
qu=request.form("class2")
    if qname="" then 
    Response.Write "<script>alert(""圈子名称不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    if shi="" then 
    Response.Write "<script>alert(""圈子所属地区不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if      
    if len(qname)>8 then 
    Response.Write "<script>alert(""圈子名称必须小于8个字！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if  
    if beizhu="" then 
    Response.Write "<script>alert(""圈子简介不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from [quan] where id="&qid&" "
    rsq.open sqlq,conn,1,3
    rsq("cjr")=username
    rsq("name")=qname
    rsq("lb")=leibie
    rsq("beizhu")=beizhu
    rsq("shi")=shi
    rsq("qu")=qu
    rsq("logo")=pic
    rsq.update
    rsq.close
   
    
    
    response.redirect"Gu_User.asp?guxing=adminquan"
end if
%>
<%
if request.querystring("Action")="tui" then
id=request.querystring("id")
qid=request.querystring("qid")
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from quan where id="&qid&" and cjr='"&Request.Cookies("Ku_USER")("User_Name")&"'"
    rsmsg.open sqlmsg,conn,1,3
    if not(rsmsg.eof and rsmsg.bof) then
    response.Write("<script>alert(""此圈是您创建的，不能退出。如果需要删除，请联系QQ：23835417！！"");location.href=""Gu_User.asp?guxing=adminquan"";</script>")
else 
delsqlrebbs="delete from quan_ren where id="&id
    conn.execute(delsqlrebbs)        
    
    
    
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from quan where id="&qid&""
    rsmsg.open sqlmsg,conn,1,3
    
    rsmsg("qnrs")=rsmsg("qnrs")-1
    rsmsg.update
    rsmsg.close
    response.redirect"Gu_User.asp?guxing=adminquan"
end if
end if
%>
<%
if request.querystring("Action")="tiren" then
id=request.querystring("id")
qid=request.querystring("qid")
delsqlrebbs="delete from quan_ren where id="&id
    conn.execute(delsqlrebbs)        
    
    
    
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from quan where id="&qid&""
    rsmsg.open sqlmsg,conn,1,3
    
    rsmsg("qnrs")=rsmsg("qnrs")-1
    rsmsg.update
    rsmsg.close
    response.redirect"Gu_User.asp?guxing=adminquan"
end if
%>
<%
if request.querystring("Action")="laren" then
username=request.form("username")
qid=request.querystring("qid") 
    set rsmu=server.createobject("adodb.recordset")
    sqlmu="select * from [Ku_user] where username='"&username&"'"
    rsmu.open sqlmu,conn,1,3
    if (rsmu.eof and rsmu.bof) then
    response.Write("<script>alert(""此会员不存在，请查证后再拉人！！"");location.href=""Gu_User.asp?guxing=adminquan"";</script>")
    else
       
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from quan where id="&qid&""
    rsmsg.open sqlmsg,conn,1,3
    
    rsmsg("qnrs")=rsmsg("qnrs")+1
    rsmsg.update
    
    set rsml=server.createobject("adodb.recordset")
    sqll="select * from quan_ren"
    rsml.open sqll,conn,1,3
    rsml.addnew
    rsml("qid")=qid
    rsml("sqr")=username
    rsml("addtime")=now()
    rsml.update
    rsml.close    
    
    
    response.redirect"Gu_User.asp?guxing=adminquan"
end if
end if
%>
<%
if request.querystring("Action")="puttie" then
qid=request.querystring("qid")
title=request.form("title")
qid=request.form("qid")
username=request.form("username")
content=request.form("content")
    if title="" then 
    Response.Write "<script>alert(""帖子主题不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if content="" then 
    Response.Write "<script>alert(""帖子内容不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from quan_ht "
    rsq.open sqlq,conn,1,3
    rsq.addnew
    rsq("qid")=qid
    rsq("title")=title
    rsq("content")=content
    rsq("addtime")=now()
    rsq("fbr")=username
    rsq("userip")=Request.ServerVariables("REMOTE_ADDR")
    rsq.update
    set rsqu=server.createobject("adodb.recordset")
    sqlqu="select * from quan where id="&qid&""
    rsqu.open sqlqu,conn,1,3
    rsqu("qnht")=rsqu("qnht")+1
    rsqu.update
    rsqu.close
response.redirect"Gu_showtie.asp?guxing="&rsq("id")&""
end if
%>
<%
if request.querystring("Action")="retie" then
qid=request.querystring("qid")
tid=request.querystring("tid")
title=request.form("title")
username=request.form("huifuren")
content=request.form("content")
    if title="" then 
    Response.Write "<script>alert(""帖子主题不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    if content="" then 
    Response.Write "<script>alert(""帖子内容不能为空！"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    set rsq=server.createobject("adodb.recordset")
    sqlq="select * from quan_hf "
    rsq.open sqlq,conn,1,3
    rsq.addnew
    rsq("qid")=qid
    rsq("htid")=tid    
    rsq("title")=title
    rsq("content")=content
    rsq("addtime")=now()
    rsq("username")=username
    rsq("userip")=Request.ServerVariables("REMOTE_ADDR")
    rsq.update
    set rsqu=server.createobject("adodb.recordset")
    sqlqu="select * from quan_ht where id="&tid&""
    rsqu.open sqlqu,conn,1,3
    rsqu("hfcs")=rsqu("hfcs")+1
    rsqu.update
response.redirect"Gu_showtie.asp?guxing="&rsqu("id")&""
end if
%>
<!------>
<%
if request("action")="delboxmsg" then
id=Request.QueryString("id")
    delsql="delete from ku_msgbox where id="&id
    conn.execute(delsql)
    conn.close
    response.redirect"Ku_User.asp?Action=box"
    end if
%>
<%
if request("action")="edituser" then
    username=strLeach(trim(request("username")))
    pass2=strLeach(trim(request("password1")))
    pass1=strLeach(trim(request("password2")))    
    answer=strLeach(trim(request("answer")))    
    key=strLeach(trim(request("key")))    
    sex=strLeach(trim(request("sex")))    
    http=strLeach(trim(request("http")))    
    email=strLeach(trim(request("email")))    
    tel=strLeach(trim(request("tel")))    
    qq=strLeach(trim(request("qq")))    
    address=strLeach(trim(request("address")))   
    
     
    if username="" then 
    Response.Write "<script>alert(""会员名称不能为空!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if
    if pass1=pass2 then
    password=md5(pass1)
    else
    Response.Write "<script>alert(""俩次输入密码不一样!"");location.href=""javascript:history.back()"";</script>"
    Response.end()    
    end if
    if answer="" then 
    Response.Write "<script>alert(""问题不能为空!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if    
    if key="" then 
    Response.Write "<script>alert(""问题答案不能为空!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if 
    
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from Ku_user where username='"&username&"'"
    rsmsg.open sqlmsg,conn,1,3
    
    rsmsg("username")=username
    if pass1<>"" then
    rsmsg("password")=password
    end if
    rsmsg("answer")=answer
    rsmsg("key")=key
    rsmsg("http")=http
    rsmsg("email")=email
    rsmsg("tel")=tel
    rsmsg("qq")=qq
    rsmsg("address")=address
    rsmsg("sex")=sex     
    rsmsg("ip")=Request.ServerVariables("REMOTE_ADDR")    
    rsmsg.Update
    rsmsg.close
    conn.close
    set rsmsg=nothing
    set conn=nothing    
           response.Write("<script>alert(""修改成功！！"");location.href=""Gu_user.asp?guxing=edit_user"";</script>")
           end if
%>
<%
if request("action")="send" then
fname=request.form("fname")
jname=strLeach(trim(request("jname"))) 
title=strLeach(trim(request("title"))) 
content=server.HTMLEncode(trim(request("content"))) 
    if fname=jname then 
    Response.Write "<script>alert(""不能给自己发短信!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from Ku_user where username='"&jname&"'"
    rsmsg.open sqlmsg,conn,1,3
    if (rsmsg.eof and rsmsg.bof) then
    Response.Write "<script>alert(""接收短信的会员不存在!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if  
    if jname="" then 
    Response.Write "<script>alert(""接收短信会员名不能为空!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if
    if title="" then 
    Response.Write "<script>alert(""短信标题不能为空!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if
    if content="" then 
    Response.Write "<script>alert(""短信内容不能为空!"");location.href=""javascript:history.back()"";</script>"
    Response.end()
    end if
    set rsf=server.createobject("adodb.recordset")
    sqlf="select * from Ku_user where username='"&fname&"'"
    rsf.open sqlf,conn,1,3  
      
    if rsf("jifen") < 2  then
    response.Write("<script>alert(""您的帐户不足 2 积分，不能发送信息！！"");location.href=""Ku_user.asp?Action=Send"";</script>")
    else
    rsf("jifen")=rsf("jifen")-2
    rsf.update
    rsf.close
    set rsbox=server.createobject("adodb.recordset")
    sqlbox="select * from Ku_msgbox"
    rsbox.open sqlbox,conn,1,3 
    rsbox.addnew
    rsbox("fname")=fname
    rsbox("jname")=jname
    rsbox("title")=title
    rsbox("content")=content
    rsbox("addtime")=now()
    rsbox("sendip")=Request.ServerVariables("REMOTE_ADDR")
    rsbox.update
    rsbox.close 
       conn.close
    set rsbox=nothing
    set conn=nothing    
           response.Write("<script>alert(""发送成功，已扣除您 2 积分！！"");location.href=""Ku_user.asp?Action=Send"";</script>")
end if
end if
    
%>
<%
if request("action")="put_fenlei" then
title=server.HTMLEncode(trim(request("biaoti")))
class1=request.form("class1")
class2=request.form("class2") 
content=server.HTMLEncode(trim(request("neirong"))) 
youxiaoqi=request.form("yxq")
username=server.HTMLEncode(trim(request("fbr"))) 
lianxiren=server.HTMLEncode(trim(request("lianxiren"))) 
tel=server.HTMLEncode(trim(request("dianhua"))) 
qq=server.HTMLEncode(trim(request("qq"))) 
email=server.HTMLEncode(trim(request("email"))) 
address=server.HTMLEncode(trim(request("dizhi"))) 
    set rs=server.createobject("adodb.recordset")
    sql="select * from Ku_fenlei"
    rs.open sql,conn,1,3
    rs.addnew
    rs("title")=title 
    rs("class1")=class1
    rs("class2")=class2
    rs("content")=content
    rs("times")=youxiaoqi
    rs("username")=username
    rs("lianxiren")=lianxiren
    rs("tel")=tel
    rs("qq")=qq
    rs("email")=email
    rs("address")=address
    rs("addtime")=now()
    if Ku_fl=1 then
    rs("shenhe")=1
    else
    rs("shenhe")=0
    end if
    rs("ip")=Request.ServerVariables("REMOTE_ADDR") 
    rs.update
    rs.close
response.Write("<script>alert(""分类信息发布成功！！"");location.href=""Ku_User.Asp?Action=Manage_fenlei"";</script>")
end if
%>
<%if request("action")="shenheuser" then
    set rsmsg=server.createobject("adodb.recordset")
    sqlmsg="select * from Ku_user where username='"&request("user")&"'"
    rsmsg.open sqlmsg,conn,1,3
        if (rsmsg.eof and rsmsg.bof) then
        response.Write("<script>alert(""帐号错误，请不要乱操作！！"");location.href=""Ku_User.Asp?Action=Shenhe"";</script>")
        else
        rsmsg("shenhe")=1
        rsmsg.update
        rsmsg.close
          response.Write("<script>alert(""审核成功，欢迎使用AspBar！！"");location.href=""Ku_User.Asp"";</script>")    
          end if
end if  
        
%>

						