<%
Function Deal(exp1)
dim exp2
exp2=Replace(exp1,"<","<")
exp2=Replace(exp2,">",">")
exp2=Replace(exp2,"'","''")
exp2=Replace(exp2,Chr(13)," ")
Deal=exp2
End Function
Set Conn=Server.CreateObject("ADODB.Connection")
Connstr="DBQ="+server.mappath("9/guestbook.mdb")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};DriverId=25;FIL=MS Access;ImplicitCommitSync=Yes;MaxBufferSize=512;MaxScanRows=8;PageTimeout=5;SafeTransactions=0;Threads=3;UserCommitSync=Yes;"
Conn.Open connstr
If Request("task")="insert" then
If Request("xm")="" then
xm="不告訴你"
else
xm=Request("xm")
xm=Deal(xm)
end if
if request("email")="" then
email="我沒有"
email=Deal(email)
else
email=Request("email")
end if
if request("url")="" then
url="沒有"
else
url=Request("url")
url=Deal(url)
end if
sj = Date()
sj = sj & " " & Hour(Time()) & ":" & Minute(Time())
If Request("ly")="" then
Response.write("請輸入留言!!!")
Response.end
else
ly=Request("ly")
ly=Deal(ly)
end if
sql="INSERT INTO lyb (ip,xm,url,email,sj,ly) VALUES ('"
sql=sql & Request("REMOTE_ADDR") & "','" & xm & "','" & url & "','" & email & "','" & sj & "','" & ly & "')"
conn.execute(sql)
end if
set rs=server.createobject("adodb.recordset")
on error resume next
rs.open "select * from lyb order by sj DESC",conn,1,1
rs.pagesize=15
rs.AbsolutePage =1
if request("page")<>"" then rs.AbsolutePage =Request("page")
RowCount =rs.pagesize
%>