%26lt;!--#include file="../conn/dbconn1.asp"--%26gt;
%26lt;!--#include file="../inc/safe.asp"--%26gt;
%26lt;%
content=Replace_Text(request.Form("content"))
content=replace(content,"%26lt;","[")
content=replace(content,"%26gt;","]")
newsid=Replace_Text(request.Form("newsid"))
ip=request.Form("ip")
rname=Replace_Text(request.Form("rname"))
rname=replace(rname,"%26lt;","[")
rname=replace(rname,"%26gt;","]")
'username=Replace_Text(request.Form("username"))
'username=replace(username,"%26lt;","[")
'username=replace(username,"%26gt;","]")
'处理发表内容是脏话
set rs=server.CreateObject("adodb.recordset")
sql="select * from badword"
rs.open sql,conn,3,3
if rs.eof then
response.Write("mei ziliao!")
else
on error resume next
do while not rs.bof and not rs.eof
content=replace(content,rs.fields("word").value,"**")
rname=replace(rname,rs.fields("word").value,"**")
rs.movenext
loop
end if
rs.close
set rs=nothing
''''''''''''''''''''''''''''''
set rs=server.CreateObject("ADODB.RecordSet")
sql="select * from pl"
rs.open sql,conn,3,3
rs.addnew
rs("content")=content
rs("newsid")=newsid
rs("ip")=ip
rs("rname")=rname
rs("username")=username
rs.update
rs.close
%%26gt;
%26lt;%
set rsn=server.CreateObject("adodb.recordset")
sqln="select newsid,plnum,plbz from news where newsid="%26amp;newsid%26amp;""
rsn.open sqln,conn,1,3
rsn("plnum")=rsn("plnum")+1
rsn("plbz")=1
rsn.update
rsn.close
%%26gt;
%26lt;script%26gt;
alert("成功发布！")
parent.location.href="shownews.asp?newsid=%26lt;%=newsid%%26gt;"
%26lt;/script%26gt;