<!--#include file="inc/DB.INC"-->
<%

userid=session("myuserid")
password=session("mypwd")
if userid="" then
%>
<script language="Javascript">
alert("你還沒有登錄，無(wú)權(quán)進(jìn)入!");
parent.location.href="index.asp";
</script>
<%
end if
id=request("flag")
content=request.form("content")
content=replace(content,"'","''",1)
content=replace(content,"<","〈",1)
content=replace(content,">","〉",1)
if id="add" then
posttime=now()
set rs=server.createobject("ADODB.Recordset")
	sql="select truename from txluser where userid='"&userid&"'"
	rs.open sql,conn,1,1
truename=rs("truename")
rs.close
set rs=nothing
sql="insert into classnote(userid,posttime,content,truename) values('"
sql=sql&userid&"','"&posttime&"','"&content&"','"&truename&"')"
conn.execute(sql)
response.redirect "note.asp" 
else
conn.execute "update classnote set content='"&content&"' where id="&id
conn.close
set conn=nothing
response.redirect "note.asp" 
end if%>