дÈëÎÊÌâ

ÁÖ·ã

´úÂëÈçÏ£º

³ÌÐò´úÂ룺
<!--#include file="conn.asp"-->
<% if request.cookies("godbook")("username")="" then
response.Redirect("login.asp")
end if %>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<% newsid=request.QueryString("newsid")
bookid=request.QueryString("bookid")
userid=request.QueryString("userid")


if newsid="" then
newsid=0
end if
if bookid="" then
bookid=0
end if

content=server.HTMLEncode(Request.Form("content"))


set rs=server.CreateObject("adodb.recordset")
rs.open "select * from fbqqmes",conn,1,3
rs.addnew
rs("content")=content

rs("userid")=userid
rs("newsid")=newsid
rs("bookid")=bookid
rs("myuserid")=request.cookies("godbook")("userid")

rs.update
rs.close
set rs=nothing
response.write "<script language=javascript>alert('·¢²¼³É¹¦£¡');history.go(-1);</script>"

response.End
%>

Ö´ÐÐÒÔºó³ýcontentÕâ¸ö×Ö¶ÎÒÔÍⶼ¿ÉÒÔ¼ÈëÊý¾Ý¿â
Ψ¶ÀcontentÕâ¸ö×Ö¶ÎÈ´ÊÇ¿Õ°×µÄ
Íû¸ßÈËÖ¸µã

¡îÌk»¡©gÎÞ»Ú

contentµÄÈ·ÊÇÓÉ±íµ¥´«¹ýÀ´µÄ

ÒѾ­ÕÒµ½Ô­ÒòÁË ÊÇ×ֶζ¨ÒåµÄÎÊÌâ  Ì«´óÒâÁË¡£¡£
²»¹ý»¹ÊÇлл¥ÉϵĻشð

ìá¡î°®Äã

newsid=request.QueryString("newsid")
bookid=request.QueryString("bookid")
userid=request.QueryString("userid")
ÕâÈý¸öÊÇURL´«¹ýÀ´µÄ,

content=server.HTMLEncode(Request.Form("content"))

Õâ¸öÓ¦¸ÃÊÇ±íµ¥´«¹ýÀ´µÄ¡£ÄãÈ·¶¨£¿

dg_gaga

@,@..ÍÛ~~` ×ß´íµØ·½À²~``