<!--#include file="dbpath.asp"-->
<!--#include file="function/char.inc"-->
<%
   ssubject = CheckStr(request.form("txtcontop"))
   smemo = CheckStr(request.form("txtcontent"))
   sanser = CheckStr(request.form("txtanser"))
   useridtxt = request("userid")
   pagetxt = Request("cpage")
   scheckbox=request.form("htmlok")
   sansertime=cstr(now())
if scheckbox= "yes" then
   ssubject = sustainhtml(ssubject)
   smemo = sustainhtml(smemo)
   sanser = sustainhtml(sanser)
else
   ssubject = htmlencode(ssubject)
   smemo = htmlencode(smemo)
   sanser = htmlencode(sanser)
end if  
   upsql=" UPDATE book SET ansertime='" & sansertime & "',subject='" & ssubject & "',memo='" & smemo & "',anser='" & sanser &"' WHERE id=" & useridtxt
   conn.Execute upsql
   set conn=nothing
   response.redirect "manage.asp?page=" & pagetxt
%>