<!--#include file="conn.inc"-->
  <%cname=TRIM(request("t1"))
cphone=TRIM(request("t2"))
cem=TRIM(request("t3"))
cqq=TRIM(request("t4"))
ctx=trim(request("t5"))
czy=""
cdw=""
cbz=TRIM(request("s1"))
cbz=replace(cbz,"'",chr(34))
cbz=replace(cbz,chr(13)+chr(10),"<br>")
cipdz=trim(cstr(request.servervariables("remote_addr")))
mdate=cstr(date)
mtime=cstr(time)
sr=cname+cphone+cem+cqq+cbz
Response.Write sr
if Instr(sr,"=")>0 or Instr(sr,"%")>0 or Instr(sr,"<")>0 or Instr(sr,">")>0 or  Instr(sr,"&")>0 or Instr(sr,"$")>0 then
Response.Write "&ck=e&"
else
fpho=1
dim ip(4)
for i=1 to 4
   ip(i)=""
next
lip=len(cipdz)
n=0
ndw=""
for i=1 to 4
   for jj=0 to 2 
      ipcz=mid(cipdz,i+n,1)
      if ipcz="." then exit for
      ip(i)=ip(i)+ipcz
      n=n+1
   next
next
    sql_sr="select * from ipdz where ip1='"+IP(1)+"' and ip2='"+IP(2)+"'  and ip3='"+IP(3)+"'"
    Set RSIP = Conn.Execute(SQL_sr)
nc=0
do while not rsip.eof  
    nc=1
   rsip.movefirst
   exit do
loop
   if  nc=0 then
    ndw="遠方"
  else
    ndw=rsip("dw")
  end if%>  
<%  wip=""
wbz=""
numb=0
if  len(cname)>0 and len(cbz)>0 then
    sql_s="select max(code) from book "
    Set RS = Conn.Execute(SQL_s)
    if isnull(rs(0)) then 
      ccode="1"
    else
      ccode=cstr(rs(0)+1)
      mcode=cstr(rs(0))
      sql_sw="select * from book where code="+mcode
     Set RSw = Conn.Execute(SQL_sw)
      wbz=trim(rsw("bz"))
     wname=trim(rsw("name"))
   end if
   if cname=wname and ccode<>"1" and cbz=wbz then
      ui=1
   else
      mdate=cstr(date)
      mtime=cstr(time)
          if  len(cdw)<10 then
                       cdw=ndw
                 end if
      sql_input="insert into book values ("+ccode+",'"+cname+"','"+cdw+"','"+cphone+"','"+mdate+"','"+mtime+"','"+cipdz+"','   ','"+cbz+"','"+czy+"','"+ctx+"','"+cem+"','"+cqq+"')"
       if  fpho=1 then
      Set RSp = Conn.Execute(SQL_input)
       end if
   end if
end if
Response.Write "&ck=ok&"
end if
%>