<%
'=========================================================
' File: smallpaper.asp
' Version:5.0
' Date: 2002-9-10
' Script Written by satan
'=========================================================
' Copyright (C) 2001,2002 AspSky.Net. All rights reserved.
' Web: http://www.aspsky.net,http://www.dvbbs.net
' Email: info@aspsky.net,eway@aspsky.net
'=========================================================
dim msg
dim cansmallpaper
cansmallpaper=false
stats="发布小字报"
if boardid=0 then
founderr=true
Errmsg=Errmsg+"
请选择您要发布小字报的版面！"
end if
if Cint(GroupSetting(17))=0 then
Errmsg=Errmsg+" "+"
您没有发布小字报的权限，请登陆或者同管理员联系。"
founderr=true
else
if not founduser then
membername="客人"
end if
cansmallpaper=true
end if
if founderr then
call nav()
call head_var(2,0,"","")
call dvbbs_error()
else
call nav()
call head_var(1,BoardDepth,0,0)
if request("action")="savepaper" then
call savepaper()
else
call main()
end if
call activeonline()
if founderr then call dvbbs_error()
end if
call footer()
sub main()
conn.execute("delete from smallpaper where datediff('d',s_addtime,Now())>1")
%>
<%end sub%>
<%
sub savepaper()
dim username
dim password
dim title
dim content
userName=Checkstr(trim(request.form("username")))
PassWord=Checkstr(trim(request.form("password")))
title=Checkstr(trim(request.form("title")))
Content=Checkstr(request.form("Content"))
if chkpost=false then
ErrMsg=ErrMsg+" "+"
您提交的数据不合法，请不要从外部提交发言。"
FoundErr=True
end if
if UserName="" then
ErrMsg=ErrMsg+" "+"
请输入姓名"
FoundErr=True
end if
if title="" then
FoundErr=True
ErrMsg=ErrMsg+" "+"
主题不应为空。"
elseif strLength(title)>80 then
FoundErr=True
ErrMsg=ErrMsg+" "+"
主题长度不能超过80"
end if
if content="" then
ErrMsg=ErrMsg+" "+"
没有填写内容。"
FoundErr=true
elseif strLength(content)>500 then
ErrMsg=ErrMsg+" "+"
发言内容不得大于500"
FoundErr=true
end if
'客人不允许发，验证用户
if not founderr and cansmallpaper then
if PassWord<>memberword then
password=md5(password)
end if
set rs=server.createobject("adodb.recordset")
sql="Select userWealth From [User] Where UserName='"&UserName&"' and UserPassWord='"&PassWord&"'"
rs.open sql,conn,1,3
if not(rs.eof and rs.bof) then
if Clng(rs("UserWealth"))"+"
您没有足够的金钱来发布小字报，快到论坛浇点水吧。"
FoundErr=true
else
rs("UserWealth")=rs("UserWealth")-Cint(GroupSetting(46))
rs.update
end if
else
if founduser or username<>"客人" then
ErrMsg=ErrMsg+" "+"
您的密码或用户名有误，请重新输入。"
FoundErr=true
end if
end if
rs.close
set rs=nothing
end if
if founderr then
exit sub
else
sql="insert into smallpaper (s_boardid,s_username,s_title,s_content) values "&_
"("&_
boardid&",'"&_
username&"','"&_
title&"','"&_
content&"')"
'response.write sql
conn.execute(sql)
sucmsg="