<!-- #include file="conn.asp" -->
<%if wzfb<>1 then%>
 <!-- #include file="bbs/ydzq.asp" -->
<%end if
call head()
 classid=request.QueryString("classid")

set rssd=Server.CreateObject("ADODB.Recordset")
rspplsd="select smsxx,smsts from xxxx"
rssd.open rspplsd,conn,1,2
smsxx=rssd("smsxx")
smsts=rssd("smsts")
Dim GetFlag Rem(提交方式)
Dim ErrorSql Rem(非法字符) 
Dim RequestKey Rem(提交数据)
Dim ForI Rem(循环标记)
ErrorSql = ""&smsxx&"" Rem
ErrorSql = split(ErrorSql,"|")
If Request.ServerVariables("REQUEST_METHOD")="GET" Then
GetFlag=True
Else
GetFlag=False
End If
If GetFlag Then
For Each RequestKey In Request.QueryString
For ForI=0 To Ubound(ErrorSql)
If Instr(LCase(Request.QueryString(RequestKey)),ErrorSql(ForI))<>0 Then
Call error ("对不起,提交出错啦!!")
End If
Next
Next 
Else
For Each RequestKey In Request.Form
For ForI=0 To Ubound(ErrorSql)
If Instr(LCase(Request.Form(RequestKey)),ErrorSql(ForI))<>0 Then
Call error ("对不起,提交出错啦!!")
End If
Next
Next
End If
%>
<%call saycardd("发表文章")
        classid=LCase(Request("classid"))
        test=LCase(Request("test"))
        user=LCase(Request("user"))
        title=LCase(Request("title"))
if wzfb=1 then
if myid=myid then
else
call error("所有人可发表")
end if
end if
if wzfb=2 then
if myid>0 or keys=1 then
else
call error("仅支持会员和管理发表")
end if
end if
if wzfb=3 then 
if keys=1 then
else
call error("仅支持管理发表")
end if
end if
if wzfb=4 then 

if myid=myid then

call error("仅支持后台发表")
end if
end if
        if test="" then
Call error("内容不能为空！<br/>")
else
        set rs=server.createobject("adodb.recordset")
	sql="select * from sms"
	rs.open sql,conn,1,3
        rs.addnew
        rs("classid")=request("classid")
        rs("test")=request("test")
        rs("user")=request("user")
        rs("title")=request("title")
        rs.update
        session.timeout=1
        session("test")=1
	rs.close
	set rs=nothing
	conn.close
	set conn=nothing
response.write "您的文章已成功上传!"
end if


response.write "<br/>--------<br/>"
response.write "<a href='list.asp?class="&classid&"&amp;sid="&sid&"&amp;saytk="&saytk&"'>返回栏目</a><br/>"
%>
<!--#include file="fanhui.asp"-->
<%call headsay()%>

