<!--#include file="conn.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="../fuction.asp"-->
<%  username=nosql(session("username"))
password=nosql(session("userpassword"))
if session("username")=empty then
response.redirect "login.asp"
end if
    if manbid=bid or manbid=20000 then
    bid=nosql(cint(request("bid")))
    
  
    title=trim(Replace(Request.Form("title"),vbcrlf," "))
	title=Replace(title,chr(23),"")
	title=Replace(title,chr(9),"")
	title=Replace(title,chr(8),"")
    title=Replace(title,chr(34),"")
    body=request.form("body")
    body=trim(Replace(Request.Form("body"),vbcrlf," "))
    body=Replace(body,chr(23),"")
	body=Replace(body,chr(9),"")
	body=Replace(body,chr(8),"")
    body=Replace(body,chr(34),"")
    title=server.htmlencode(title)
   
  
    if title="" then
response.write"<script language='javascript'>alert('對不起，帖子主題不能為空')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if


	
    if isempty(body) or body="" then
     response.write"<script language='javascript'>alert('內容不能為空')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
      end if
  
	

	






conn.execute("insert into smallpaper (title,username,body,riqi,bid) values('"&title&"','"&username&"','"&body&"','"&now()&"','"&bid&"')")

	    
response.redirect "list.asp?bid="&bid
else
response.write"<script language='javascript'>alert('你沒權限！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end 
end if 

%>