<!--#include file="d_lj.asp" -->
<%
	xuhao=clng(Request("xuhao"))
	xinqing=Request.Form("xinqing")
	neirong=replace(Trim(Request.Form("neirong")),"'","@#$%3v42q")
	mingzi=request.Cookies("mingzi")
	cmima=request.Cookies("mima")
		if Instr(mingzi,"=")>0 or Instr(mingzi,"'")>0 or Instr(mingzi,"(")>0 or Instr(mingzi,")")>0 then
			response.Redirect("b_bankuai.asp")
		end if
	set youke=lj.execute("select youkefatie from luntan")
	if youke("youkefatie")<>0 then
		if mingzi="" then
			response.Redirect("b_kantie.asp?fanhui=youke&tiezi="& xuhao &"")
		end if
	end if
	set zhutie=lj.execute("select bankuai from tiezi where xuhao="& xuhao &"")
	bankuai=zhutie("bankuai")
		if mingzi="" then
			mingzi="游客"
		else
			set yz=lj.execute("select mima from huiyuan where mingzi='"& mingzi &"'")
			if yz("mima")<>cmima then
				response.Redirect("b_bankuai.asp")
			end if
		end if
		if neirong="" then
			response.Redirect("b_kantie.asp?fanhui=kong&tiezi="& xuhao &"")
		end if
		if len(neirong)>65535 then
			response.Redirect("b_kantie.asp?fanhui=duo&tiezi="& xuhao &"")
		end if
	lj.execute("insert into tiezi(xinqing,neirong,mingzi,shijian,tiezi,bankuai) values("& xinqing &",'"& neirong &"','"& mingzi &"',now(),"& xuhao &","& bankuai &")")
	lj.execute("update tiezi set liulan=liulan-1 where xuhao="& xuhao &"")
	response.Redirect("b_kantie.asp?tiezi="& xuhao &"")
%>