<%
dim announceid
dim UserName
dim userPassword
dim useremail
dim Topic
dim body
dim rootid
dim dateTimeStr
dim ip
dim Expression
dim signflag
dim mailflag
dim usercookies
dim ihaveupfile,upfileinfo,upfilelen
if BoardID="" or not isInteger(BoardID) or BoardID=0 then
Errmsg=Errmsg+" "+"
错误的版面参数！请确认您是从有效的连接进入。"
founderr=true
else
BoardID=clng(BoardID)
end if
IP=replace(Request.ServerVariables("REMOTE_ADDR"),"'","")
Expression=Checkstr(Request.Form("Expression"))
Topic=Checkstr(trim(request.Form("subject")))
Body=Checkstr(trim(request.form("Content")))
UserName=Checkstr(trim(request.Form("username")))
signflag=Checkstr(trim(request.Form("signflag")))
mailflag=Checkstr(trim(request.Form("emailflag")))
if memberword=trim(request.Form("passwd")) then
UserPassWord=Checkstr(trim(request.Form("passwd")))
else
UserPassWord=md5(Checkstr(trim(request.Form("passwd"))))
end if
if request.form("upfilerename")<>"" then
ihaveupfile=1
upfileinfo=replace(request.form("upfilerename"),"'","")
upfileinfo=replace(upfileinfo,";","")
upfileinfo=replace(upfileinfo,"--","")
upfileinfo=replace(upfileinfo,")","")
upfilelen=len(upfileinfo)
upfileinfo=left(upfileinfo,upfilelen-1)
else
ihaveupfile=0
end if
if signflag="yes" then
signflag=1
else
signflag=0
end if
if mailflag="yes" then
mailflag=1
else
mailflag=0
end if
dim rndnum,num1
if cint(Board_Setting(30))=1 then
if not (isnull(session("lastpost")) or boardmaster or master or superboardmaster) then
if DateDiff("s",session("lastpost"),Now())"+"
本论坛限制发贴距离时间为"&Board_Setting(31)&"秒，请稍后再发。"
FoundErr=True
end if
end if
end if
if chkpost=false then
ErrMsg=ErrMsg+" "+"
您提交的数据不合法，请不要从外部提交发言。"
FoundErr=True
end if
if UserName="" or UserPassWord="" then
username=membername
UserPassWord=memberword
end if
if UserName="" then
ErrMsg=ErrMsg+" "+"
请输入您的姓名。"
FoundErr=True
end if
if Topic="" then
FoundErr=True
ErrMsg=ErrMsg+" "+"
帖子的主题不应为空。"
elseif strLength(topic)>50 then
FoundErr=True
ErrMsg=ErrMsg+" "+"
帖子主题长度不能超过50"
end if
if strLength(body)>Clng(Board_Setting(16)) then
ErrMsg=ErrMsg+" "+"
发言内容不得大于" & CSTR(Board_Setting(16)) & "bytes"
FoundErr=true
end if
if body="" then
ErrMsg=ErrMsg+" "+"
没有填写内容。"
FoundErr=true
end if
session("lastpost")=Now()
if founderr then
call nav()
call head_var(2,0,"","")
call dvbbs_error()
else
stats="发表帖子成功"
call nav()
call head_var(1,BoardDepth,0,0)
call main()
if founderr then call dvbbs_error()
end if
call footer()
sub main()
if Cint(Board_Setting(43))=1 then
Errmsg=Errmsg+" "+"
本论坛已经被管理员限制了不允许发贴。"
founderr=true
exit sub
end if
if Cint(GroupSetting(3))=0 then
Errmsg=Errmsg+" "+"
您没有在本论坛发贴的权限，请登陆或者同管理员联系。"
founderr=true
exit sub
end if
if cint(Board_Setting(2))=1 then
if not founduser then
Errmsg=Errmsg+" "+"
本论坛为认证论坛，请登陆并确认您的用户名已经得到管理员的认证后进入。"
founderr=true
exit sub
else
if chkboardlogin(boardid,membername)=false then
Errmsg=Errmsg+" "+"
本论坛为认证论坛，请确认您的用户名已经得到管理员的认证后进入。"
founderr=true
exit sub
end if
end if
end if
usercookies=request.Cookies("aspsky")("usercookies")
if isnull(usercookies) or usercookies="" then usercookies=3
if chkuserlogin(username,userpassword,usercookies,2)=false then
errmsg=errmsg+" "+"
您的用户名并不存在，或者您的密码错误，或者您的帐号已被管理员锁定。"
founderr=true
exit sub
end if
if cint(Board_Setting(1))=1 then
if Cint(GroupSetting(37))=0 then
Errmsg=ErrMsg+" "+"
您没有权限进入隐含论坛！"
founderr=true
exit sub
end if
end if
rem 保存贴子信息
dim locktopic
if master or superboardmaster or boardmaster then
isaudit=0
locktopic=0
elseif isaudit=1 and not (master or superboardmaster or boardmaster) then
isaudit=1
locktopic=3
else
isaudit=0
locktopic=0
end if
dim LastPost,LastPost_1,uploadpic_n,Forumupload,u
dim LastPostTimes
DateTimeStr=replace(replace(CSTR(NOW()+Forum_Setting(0)/24),"上午",""),"下午","")
'插入主题表
sql="insert into topic (Title,Boardid,PostUsername,PostUserid,DateAndTime,Expression,LastPost,LastPostTime,PostTable,locktopic) values ('"&topic&"',"&boardid&",'"&username&"',"&userid&",'"&DateTimeStr&"','"&Expression&"','$$"&DateTimeStr&"$$$$','"&DateTimeStr&"','"&NowUseBbs&"',"&locktopic&")"
conn.execute(sql)
set rs=conn.execute("select top 1 topicid from topic order by topicid desc")
rootid=rs(0)
Forum_upload="gif,jpg,jpeg,bmp,zip,rar,html,swf,mid,midi,flash,rm,ra,asf,avi,wmv,exe,xls,dos,ftp,mp3,m3u,txt,mdb,dll,IMG"
Forumupload=split(Forum_upload,",")
for u=0 to ubound(Forumupload)
if instr(body,"[upload="&Forumupload(u)&"]") or instr(body,"."&Forumupload(u)&"") or instr(body,"["&Forumupload(u)&"]") then
uploadpic_n=Forumupload(u)
exit for
end if
next
if instr(body,"viewfile.asp?ID=") then uploadpic_n="down"
'插入回复表
Sql="insert into "&NowUseBbs&"(Boardid,ParentID,username,topic,body,DateAndTime,length,rootid,layer,orders,ip,Expression,locktopic,signflag,emailflag,isbest,PostUserID,isupload,isaudit) values ("&boardid&",0,'"&username&"','"&topic&"','"&body&"','"&DateTimeStr&"','"&strlength(body)&"',"&rootid&",1,0,'"&ip&"','"&Expression&"',"&locktopic&","&signflag&","&mailflag&",0,"&userid&","&ihaveupfile&","&isaudit&")"
conn.execute(sql)
set rs=conn.execute("select top 1 Announceid from "&NowUseBbs&" order by Announceid desc")
Announceid=rs(0)
if ihaveupfile=1 then conn.execute("update dv_upfile set F_AnnounceID='"&rootid&"|"&AnnounceID&"',F_Readme='"&Topic&"' where F_ID in ("&upfileinfo&")")
LastPost=replace(username,"$","") & "$" & Announceid & "$" & DateTimeStr & "$" & replace(cutStr(body,20),"$","") & "$" & uploadpic_n & "$" & UserID & "$" & rootid & "$" & BoardID
LastPost=reubbcode(replace(LastPost,"'",""))
conn.execute("update topic set LastPost='"&LastPost&"' where topicid="&rootid)
LastPost_1=replace(username,"$","") & "$" & Announceid & "$" & DateTimeStr & "$" & replace(cutStr(Topic,20),"$","") & "$" & uploadpic_n & "$" & UserID & "$" & rootid & "$" & BoardID
LastPost_1=reubbcode(replace(LastPost_1,"'",""))
if isaudit=0 then
Dim UpdateBoardID
UpdateBoardID=BoardParentStr & "," & BoardID
if datediff("d",LastPostTime,Now())=0 then
sql="update board set lastbbsnum=lastbbsnum+1,lasttopicnum=lasttopicnum+1,todaynum=todaynum+1,LastPost='"&LastPost_1&"' where boardid in ("&UpdateBoardID&")"
else
sql="update board set lastbbsnum=lastbbsnum+1,lasttopicnum=lasttopicnum+1,todaynum=1,LastPost='"&LastPost_1&"' where boardid in ("&UpdateBoardID&")"
end if
conn.execute(sql)
Dim updateinfo
set rs=conn.execute("select LastPost,TodayNum,MaxPostNum from config where active=1")
LastPostTimes=split(rs(0),"$")
LastPostTime=LastPostTimes(2)
if not isdate(LastPostTime) then LastPostTime=Now()
if datediff("d",LastPostTime,Now())=0 then
if rs(1)+1>rs(2) then updateinfo=",MaxPostNum=todaynum+1"
sql="update config set topicnum=topicnum+1,bbsnum=bbsnum+1,todayNum=todayNum+1,LastPost='"&LastPost&"' "&updateinfo&" where active=1"
else
sql="update config set topicnum=topicnum+1,bbsnum=bbsnum+1,yesterdaynum="&rs(1)&",todayNum=1,LastPost='"&LastPost&"' where active=1"
end if
conn.execute(sql)
end if
dim PostRetrunName
select case Board_Setting(17)
case 1
response.write ""
PostRetrunName="首页"
case 2
response.write ""
PostRetrunName="您所发布的论坛"
case 3
if isaudit=1 then
response.write ""
PostRetrunName="您发布的帖子必须经管理员审核后方可见"
else
response.write ""
PostRetrunName="您所发表的帖子"
end if
end select
set rs=nothing
%>