<!-- #include file="include/con_help.asp" -->
<!-- #include file="include/jk_ubb.asp" -->
<!-- #include file="include/jk_email.asp" -->
<!-- #include file="include/jk_val_code.asp" -->
<!-- #include file="include/jk_page_cute.asp" -->
<!-- #include file="include/jk_pagecute.asp" -->
<%
dim nummer,nums,rssum,page,viewpage,thepages,pageurl
pageurl="?"
nummer=6
nums=nummer
index_url="gbook"
select case action
case "write"
  tit_fir="訪客留言"
  tit="簽寫留言"
case else
  tit="網站留言"
end select

if action="write" then
  call web_head(2,1,0,0,0)
else
  call web_head(0,0,0,0,0)
end if 

'----------------------------左邊 開始----------------------------
%>
<table cellspacing=1 cellpadding=4 class=table>
<tr><td class=td0>&nbsp;<%response.write img_skin("m_")%>網站留言</td></tr>
<tr class=bg_td><td align=center>
  <table border=0 cellspacing=2 cellpadding=4 width='100%'>
  <tr><td align=center><%response.write img_skin("m_")%><a href='gbook.asp?action=write' class=blue><b>簽寫我的留言</b></a></td></tr>
  <tr><td>任何人都可以在這里留言，只有注冊并登陸后才可以看到其它留言者的系統信息。</td></tr>
  <tr><td>系統支持：Unicode支持，UBB 支持，HTML不支持</td></tr>
  </table>
</td></tr>
</table>
<%
response.write ukong
call left_action()
'----------------------------左邊 結束----------------------------
call web_center(0)
'----------------------------中間 開始----------------------------
response.write vbcrlf&"<table cellspacing=1 cellpadding=4 class=table>"

select case action
case "write"
  call gbook_write()
case else
  call gbook_main()
end select

response.write vbcrlf&"</table>"
response.write ukong
'----------------------------中間 結束----------------------------
call web_end(0,0)

sub gbook_write()
  call time_lock()
%>
<tr><td class=td0 colspan=3>&nbsp;<%response.write img_skin("m_")&tit%></td></tr>
<%
  dim found_err,drname,drsex,drqq,dremail,drurl,drwhe,drtopic,dricon,drface,drword,drremark,drhidden,valcode
  if joekoe_cms.chk() then
    drname=trim(request.form("wrname"))
    drname=joekoe_cms.code_form(drname)
    drsex=trim(request.form("wrsex"))
    drqq=trim(request.form("wrqq"))
    if drqq="" or isnull(drqq) then drqq="nuller"
    dremail=trim(request.form("wremail"))
    if dremail="" or isnull(dremail) then dremail="nuller"
    drurl=trim(request.form("wrurl"))
    drurl=joekoe_cms.code_form(drurl)
    if drurl="http://" or isnull(drurl) then drurl="nuller"
    drwhe=trim(request.form("wrwhe"))
    drwhe=joekoe_cms.code_form(drwhe)'---------------
    if drwhe="" or isnull(drwhe) then drwhe="nuller"
    dricon=trim(request.form("icon"))
    drface=trim(request.form("wrface"))
    drtopic=trim(request.form("wrtopic"))
    drtopic=joekoe_cms.code_form(drtopic)'---------------
    drword=request.form("wrword")
    drremark=request.form("wrremark")
    drhidden=trim(request.form("wrhidden"))
    valcode="jk"&trim(request.form("valcode"))
  
    found_err=""
    if not post_tim() then
      found_err=found_err&"+對不起，留言的間隔時間為 <font class=red>"&int(dim_num(28))&"</font> 秒！<br>"
    end if    
    if symbol_name(drname)="no" then
      found_err=found_err & "+請輸入您的 <font class=red>用戶名</font>（長度不能大于20）<br>"
    end if
    if drqq<>"nuller" then 
      if not(isnumeric(drqq)) then
        found_err=found_err & "+您的 <font class=red>QQ</font>> 只能為數字！<br>"
      end if
    end if
    if dremail<>"nuller" then 
      if email_ok(dremail,50)=false then
        found_err=found_err & "+您輸入的 <font class=red>Email</font> 格式有錯誤！<br>"
      end if
    end if
    if drtopic="" or isnull(drtopic) then
      found_err=found_err & "+留言的 <font class=red>主題</font> 是必需要的！請輸入。<br>"
    end if
    if drword="" or isnull(drword) then
      found_err=found_err & "+留言的 <font class=red>留言內容</font> 是必需要的！請輸入。<br>"
    end if
    if val_chk(index_url)=false then
      found_err=found_err&"+您輸入的 <font class=red>驗 證 碼</font> 為空或有錯誤，請勿非法提交！<br>"
    end if
    if found_err<>"" then
      response.write "<tr class=bg_td><td align=center height=300 colspan=3>"&found_error(found_err,260)&"</td></tr>"
      exit sub
    end if
    sql="select * from gb_data where (id is null)"
    call joekoe_cms.exec("",-1)
    rs.open sql,conn,1,3
    rs.addnew
    rs("nname")=drname
    rs("sex")=drsex
    rs("whe")=drwhe
    rs("qq")=drqq
    rs("email")=dremail
    rs("url")=drurl
    rs("ip")=user_ip
    rs("sys")=user_sys
    rs("icon")=dricon
    rs("face")=drface
    rs("topic")=drtopic
    rs("word")=drword
    rs("tim")=joekoe_cms.now_time
    rs("re_icon")="0"
    if drhidden="yes" then
      rs("hidden")=true
    else
      rs("hidden")=false
    end if
    rs.update
    rs.close
%>
<tr class=bg_td><td align=center height=300 colspan=3>
??！<font class=red>謝謝你的留言</font>?。?！<br><br>
<a href='gbook.asp'>返回網站留言</a><br><br>
（系統將在 <font class=red><%response.write dim_num(21)%></font> 秒鐘后自動返回）
<meta http-equiv='refresh' content='<%response.write dim_num(21)%>; url=gbook.asp'>
</td></tr>
<%
    call val_chk_end(index_url)
    exit sub
  end if
%>
<script language=javascript>
<!--
function isCharsInBag(inputchar, bagchar)
{ 
  var ii,cc;
  for (ii = 0; ii < inputchar.length; ii++)
  { 
    cc = inputchar.charAt(ii);
    if (bagchar.indexOf(cc) > -1) { return "no"; }
    else { return "yes"; }
  }
}
function check(write_frm)
{
  var errorcharname="><,[>{}?/+=|\\'\":;~!#$%()`@";
  var errorcharqq="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz><,[>{}?/+=|\\'\":;~!#$%()`";
  var wr_name=write_frm.wrname.value;
  if(wr_name=="" || wr_name==null)
  {
    alert("你還沒完全留下所需信息！\r\n你的 名字 是必須要的。");
    document.write_frm.wrname.focus();
    return false;
  }
  var errorname=isCharsInBag(wr_name,errorcharname);
  if ( errorname=="no" )
  {
    alert("你的 名字 不得含有以下字符！\r\n  ><,[{}?/+=|\\'\":;~!#$%()`");
    document.write_frm.wrname.focus();
    return false;
  }
  var wr_qq=write_frm.wrqq.value;
  if(write_frm.wrqq.value!=="")
  {
    var errorqq=isCharsInBag(wr_qq,errorcharqq);
    if ( errorqq=="no" )
    {
      alert("你的 QQ 只能是數字！\r\n請重新輸入。");
      document.write_frm.wrqq.focus();
      return false;
    }
  }
  var wr_email=write_frm.wremail.value;
  if(wr_email!=="")
  {
    var AtSym = wr_email.indexOf('@');
    var Period = wr_email.lastIndexOf('.');
    var Space = wr_email.indexOf(' ');
    var Length = wr_email.length - 1;
    if ((AtSym < 1) || (Period <= AtSym+1) || (Period == Length ) || (Space != -1))
    { 
      alert('你的 eMail地址 格式不對！\r\n請重新輸入。');
      document.write_frm.wremail.focus();