<!--#include file="conn.asp"-->
<%if session("admin")="" then
response.Write "<script language='javascript'>alert('網絡超時或您還沒有登陸！');window.location.href='login.asp';</script>"
response.End
else
if session("flag")>1 then
response.Write "<div align=center><font size=80 color=red><b>您沒有此項目管理權限！</b></font></div>"
response.End
end if
end if

function changechr(str) 
    changechr=replace(replace(replace(replace(str,"<","&lt;"),">","&gt;"),chr(13),"<br>")," "," ") 
    changechr=replace(changechr,"'","&quot;")
    changechr=replace(changechr,mid(" "" ",2,1),"&quot;")
end function

Content=Request.Form("Content")

'將里面的鏈接換成本地鏈接
 aa="http://"&Request.ServerVariables("server_name")&Request.ServerVariables("path_info")
 aa= mid(aa,1,len(aa)-21)		'21=admin/zhuantiadd2.asp
content=replace(content,aa,"")

session("content")=content

if Content=""  then
%>
<script language=javascript>
history.back()
alert("請輸入文章內容！")
</script>
<%
Response.End
end if

title=request.form("title")
if title="" then
%>
<script language=javascript>
history.back()
alert("請填寫文章標題！")
</script>
<%
Response.End
end if

if len(title)>100 then
%>
<script language=javascript>
history.back()
alert("文章標題過長！")
</script>
<%
Response.End
end if
title=changechr(trim(request.form("title")))
if title_color="0" then
	title_color="#003399"
end if
title_size=Request.Form("title_size")
if title_size="0" then
	title_size="5"
end if
title_type=Request.Form("title_type")
if title_type="0" then
	title_type="b"
end if
title_face=Request.Form("title_face")
if title_face="0" then
	title_face="楷體_GB2312"
end if

set rs=server.createobject("adodb.recordset")
sql="select * From shop_zhuanti" 
rs.open sql,conn,1,3
rs.addnew
rs("title")=title
rs("content")=content
rs("UpdateTime")=now()
rs("titletype")=title_type
rs("titlesize")=title_size
rs("titlecolor")=title_color
rs("titleface")=title_face
rs.update

rs.Close
set rs=nothing
'set rs3=server.createobject("adodb.recordset")
 '   sql3="select * from uploadpic where username='"&username&"'" 
  '  rs3.open sql3,dataconn,1,3
   ' do while not rs3.eof
    'set rs4=server.createobject("adodb.recordset")
     '      sql4="select * from attach" 
      '     rs4.open sql4,dataconn,1,3
       '    filename=rs3("picname")
        '   rs4.addnew
         '  rs4("filename")=filename
          ' rs4("newsid")=newsid
           'rs4.update
           'rs4.close
           'set rs4=nothing
           'RS3.MoveNext
           'loop
           'dataconn.execute("delete from uploadpic where username='"&username&"'")
           'rs3.close
           'set rs3=nothing
session("content")=""
conn.close
set conn=nothing

%>
<script language="javascript">
window.alert("文章添加成功!");
//window.close();
window.location.href='managezhuanti.asp'
</script>