<!--#include file="conn.asp"-->
<!--#include file="adovbs.inc"-->

<form name="form1" method="post" action="">
<table width="90%" border="0" align="center">
  <tr> 
    <td height="80">昵稱: 
        <input name="uname" type="text">
</td>
  </tr>
  <tr>
  <td>密碼：<input name="upswd" type="password"><font color="red">*可選添</font></td>
  </tr>
  <tr>
    <td height="63"> 
      <p>&nbsp;</p>
   
        標題:
<input name="utitle" type="text">

      <p>&nbsp;</p></td>
  </tr>
  <tr> 
    <td>內容:<textarea name="ubody" cols="70" rows="12"></textarea></td>
  </tr>
  <tr>
  <td>
  <input type=submit><input type=reset>
  </td>
    </tr>
  </table>
  <% if request("uname")<>"" then

uname=request("uname")
upswd=request("upswd")
utitle=request("utitle")
ubody=request("ubody")

set cmd=server.createobject("ADODB.command")
with cmd
	.activeconnection=conn
	.commandtext="sp_ebook"
	.CommandType=adCmdStoredProc 
end with

set param1=cmd.createparameter("@choice",advarchar,adparaminput,50)
cmd.parameters.append param1
set param2=cmd.createparameter("@id",advarchar,adparaminput,50)
cmd.parameters.append param2

set param3=cmd.createparameter("@uname",advarchar,adparaminput,50,renaski)
cmd.parameters.append param3

set param3=cmd.createparameter("@upswd",advarchar,adparaminput,50,1234)
cmd.parameters.append param3

set param5=cmd.createparameter("@utitle",advarchar,adparaminput,100,utitle)
cmd.parameters.append param5

set param6=cmd.createparameter("@ubody",advarchar,adparaminput,3000,dd)
cmd.parameters.append param6

set param7=cmd.createparameter("@utime",advarchar,adparaminput,1000)
cmd.parameters.append param7

cmd("@choice")="add"
cmd("@id")=default

cmd("@uname")=uname
cmd("@upswd")=upswd
cmd("@utitle")=utitle
cmd("@ubody")=ubody
cmd("@utime")=now()

cmd.execute

if uname = admin and upswd =adminpswd then
	session("admin")=True
end if
conn.close
response.write "<script>alert('添加成功');location.href('index.asp');</script>"
end if

%>