<%!
private String escHTMLTags(String input){
  if( input == null || input.length() ==0){
    return input;
  }
  StringBuffer buff =new StringBuffer(input.length()+6);
  char ch=' ';
  
  for(int i=0;i<input.length();i++){
    ch = input.charAt(i);
    if(ch=='<'){
      buff.append("&lt;");
    } else if(ch=='>'){
      buff.append("&gt;");
//    } else if(ch=='\n'){
//      buff.append("<br>");
    } else if(ch==' '){
      buff.append("&nbsp;");
    } else if(ch=='\''){
      buff.append("&acute");
    } else {
      buff.append(ch);
    }
  }
    return buff.toString();
}

private boolean checkDataValid(String input){
  String strTemp = new String(input);
  if(strTemp == null || strTemp.length() == 0){
    return false;
  }
  
  strTemp = strTemp.trim();
  if(strTemp.length() == 0){
    return false;
  }else{
    return true;
  }
} 
%>
<jsp:useBean id="basicDB" class="lyb.basicDBBean" scope="page" />
<%
  String author,title,content;
  
  author=(String)request.getParameter("author");
  title=(String)request.getParameter("title");
  content=(String)request.getParameter("content");

  System.out.println(content);  
  author = escHTMLTags(author);
  title = escHTMLTags(title);
  content = escHTMLTags(content);
  
  if(checkDataValid(author)&&checkDataValid(title)){
    String sql;
    sql = "insert into testlyb(title,author,body,addtime) values ('";
    sql += title+"','"+author+"','"+content+"',getdate())";
    String sqlCStr = new String(sql);
    System.out.println(basicDB.DBConnect2());
    basicDB.executeQuery(sqlCStr);
    System.out.println(sqlCStr);
    
    response.sendRedirect("main.jsp");
  }
  
%>