<!--#include file="mdb.asp"-->
<!--#include file="inc/format.asp"-->
<!--#include file="inc/error.asp"-->
<!--#include file="inc/CONFIG.asp"-->
<%
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
Response.Write("<script language=javascript>alert('你提交的路徑有誤，禁止從站點外部提交數據請不要亂改參數！');this.location.href='userlogin.asp';</script>") 
response.end
end if
if userfb="no" then
response.write"<SCRIPT language=JavaScript>alert(' 錯誤提示：\n\n參數非法！非法操作！！\n\n系統設置會員不能發表 ！');"
response.write"JavaScript:window.close()</SCRIPT>"
response.end
end if
dim founderr,errmsg,isimage
isimage=true
founderr=false
errmsg=""
set User_UserPoint=conn.execute("select points,usergrade from [user] where userid="&request.Cookies("HX_USER")("uid"))
userPoint=User_UserPoint(0)
userGrade=User_UserPoint(1)
User_UserPoint.close
set User_UserPoint=nothing
if request.Cookies("HX_USER")("Grade")="" then 
Grade=0
else 
Grade=userGrade
end if
if request.QueryString("hx66")="pic" then'============網友上傳圖片處理程序
set rs=server.CreateObject("adodb.recordset")
rs.open "select pic_name,pic_pic from pic where pic_name='"&trim(request.form("name"))&"' or pic_pic='"&trim(request.form("pic"))&"'",conn,1,1
if not rs.eof and not rs.bof then
	   	   response.write"<SCRIPT language=JavaScript>alert('錯誤提示：\n\n① 此圖片已提交過，正等待審核通過，請不要重復提交!\n\n② 您提交的圖片已經存在，感謝你的支持!');"
	           response.write"JavaScript:window.close()</SCRIPT>"
		   Response.End
rs.close
end if
sql="select * from pic"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim piccatid,picname,picpic,picdesc,pictjuser
piccatid=cint(request.form("piccatid"))
picname=trim(replace(request.form("name"),"'",""))
picpic=trim(replace(request.form("pic"),"'",""))
picdesc=trim(replace(request.form("desc"),"'",""))
pictjuser=trim(replace(request.form("tjuser"),"'",""))
rs("tjuser")=pictjuser
rs("pic_url")="KB"
if picname="" then
   founderr=true
   errmsg=errmsg+"<br>"+"<li>你必須填寫圖片名稱！"
else
  if strLength(trim(request.form("name")))>30 then
      founderr=true
	  errmsg=errmsg+"<br>"+"<li>圖片名稱太長，不可以超過30個字符！"
  else
     rs("pic_name")=picname
  end if
end if
if piccatid<1 then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須選擇圖片所屬分類！"
else
  rs("piccat_id")=piccatid
end if
if picpic="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須填寫圖片地址！"
else
  rs("pic_pic")=picpic
  rs("pic_spic")=picpic
end if
if picdesc="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須填寫圖片的簡要說明！"
else
  if strLength(trim(request.form("desc")))>100 then
      founderr=true
	  errmsg=errmsg+"<br>"+"<li>圖片介紹太長，不可以超過100個字符！"
else
  rs("pic_desc")=picdesc
end if
end if
if founderr then
  call checkerr()
  response.end
else
if Grade=1 then
  rs("passed")=0
sql="UPDATE [user] SET points = points + 20 where username='"&pictjuser&"'"
conn.execute (sql)
else
  rs("passed")=1
end if
  rs.update
  rs.close
  set rs=nothing
sql="select * from allcount"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3 
rs("piccount")=rs("piccount")+1
rs.update
rs.close
set rs=nothing
end if
elseif request.QueryString("hx66")="web" then'==========網友酷站上傳處理程序
set rs=server.CreateObject("adodb.recordset")
rs.open "select cs_name,cs_url from coolsites where cs_name='"&trim(request.form("name"))&"' or cs_url='"&trim(request.form("url"))&"'",conn,1,1
if not rs.eof and not rs.bof then
	   	   response.write"<SCRIPT language=JavaScript>alert('錯誤提示：\n\n① 此酷站已提交過，正等待審核通過，請不要重復提交!\n\n② 您提交的酷站已經存在，感謝你的支持!');"
	           response.write"JavaScript:window.close()</SCRIPT>"
		   Response.End
rs.close
end if
sql="select * from coolsites"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim cscatid,csname,csurl,cspic,csdesc,cstjuser
cscatid=cint(request.form("cscatid"))
csname=trim(replace(request.form("name"),"'",""))
csurl=trim(replace(request.form("url"),"'",""))
cspic=trim(replace(request.form("pic"),"'",""))
csdesc=trim(replace(request.form("desc"),"'",""))
cstjuser=trim(replace(request.form("tjuser"),"'",""))
rs("tjuser")=cstjuser
if csname="" then
   founderr=true
   errmsg=errmsg+"<br>"+"<li>你必須填寫酷站名稱！"
else
  if strLength(trim(request.form("name")))>30 then
      founderr=true
	  errmsg=errmsg+"<br>"+"<li>圖片名稱太長，不可以超過30個字符！"
  else
     rs("cs_name")=csname
  end if
end if
if cscatid<1 then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須選擇酷站所屬分類！"
else
  rs("cscat_id")=cscatid
end if
if csurl="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須填寫酷站地址！"
else
  rs("cs_url")=csurl
end if
if cspic="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須填寫酷站的圖片地址！"
else
  rs("cs_pic")=cspic
end if
if csdesc="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須填寫酷站的簡要說明！"
else
  if strLength(trim(request.form("desc")))>100 then
      founderr=true
	  errmsg=errmsg+"<br>"+"<li>酷站的說明太長，不可以超過100個字符！"
else
  rs("cs_desc")=csdesc
end if
end if
if founderr then
  call checkerr()
  response.end
else
if Grade=1 then
  rs("passed")=0
sql="UPDATE [user] SET points = points + 20 where username='"&cstjuser&"'"
conn.execute (sql)
else
  rs("passed")=1
end if
  rs.update
  rs.close
  set rs=nothing
sql="select * from allcount"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3 
rs("coolsitescount")=rs("coolsitescount")+1
rs.update
rs.close
set rs=nothing
end if
elseif request.QueryString("hx66")="art" then'============網友發表文章處理程序
set rs=server.CreateObject("adodb.recordset")
rs.open "select art_title,art_content from art where art_title='"&trim(request.form("art_title"))&"' or art_content='"&trim(request.form("art_content"))&"'",conn,1,1
if not rs.eof and not rs.bof then
	   	   response.write"<SCRIPT language=JavaScript>alert('錯誤提示：\n\n① 此文章已提交過，正等待審核通過，請不要重復提交!\n\n② 您提交的文章已經存在，感謝你的支持!');"
	           response.write"JavaScript:window.close()</SCRIPT>"
		   Response.End
rs.close
end if
sql="select * from art"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim poster,artfrom,title,keyword,content,catid,arttjuser
catid=cint(request.form("cat_id"))
title=trim(replace(request.form("art_title"),"'",""))
keyword=trim(replace(request.form("art_keyword"),"'",""))
content=rtrim(replace(request.form("art_content"),"",""))
content=trim(replace(request.form("art_content"),"∈",""))
arttjuser=trim(replace(request.form("tjuser"),"'",""))
rs("tjuser")=arttjuser
if title="" then
   founderr=true
   errmsg=errmsg+"<br>"+"<li>你必須填寫文章標題！"
else
  if strLength(trim(request.form("art_title")))>30 then
      founderr=true
	  errmsg=errmsg+"<br>"+"<li>文章標題太長，不可以超過30個字符！"
  else
     rs("art_title")=title
  end if
end if
if catid<1 then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須選擇文章所屬分類！"
else
  rs("cat_id")=catid
end if
if keyword="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須選擇文章的類型！"
else
  rs("art_keyword")=keyword
end if
if content="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必須填寫文章的內容！"
else
  if strLength(trim(request.form("art_content")))>6000 then
      founderr=true
	  errmsg=errmsg+"<br>"+"<li>文章的內容太長，不可以超過6000個字符！"
else
  rs("art_content")=content
end if
end if
if founderr then
  call checkerr()
  response.end
else
if Grade=1 then
  rs("passed")=0
sql="UPDATE [user] SET points = points + 20 where username='"&arttjuser&"'"
conn.execute (sql)
else
  rs("passed")=1
end if
  rs.update
  rs.close
  set rs=nothing
sql="select * from allcount"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3 
rs("artcount")=rs("artcount")+1
rs.update
rs.close
set rs=nothing
end if
elseif request.QueryString("hx66")="down" then'============網友添加資源處理程序
set rs=server.CreateObject("adodb.recordset")
rs.open "select soft_name,soft_url1 from soft where soft_name='"&trim(request.form("name"))&"' or soft_url1='"&trim(request.form("url1"))&"'",conn,1,1
if not rs.eof and not rs.bof then
	   	   response.write"<SCRIPT language=JavaScript>alert('錯誤提示：\n\n① 此資源已提交過，正等待審核通過，請不要重復提交!\n\n② 您提交的資源已經存在，感謝你的支持!');"
	           response.write"JavaScript:window.close()</SCRIPT>"
		   Response.End
rs.close
end if
sql="select * from soft"
set rs=server.createobject("adodb.recordset")