<%@ page language="java" import="java.sql.*" %>
<jsp:useBean id="DB" scope="page" class="dbcon.mydb" />
<jsp:useBean id="doit" scope="page" class="dbcon.doit" />
<%

int id=0;
String query,uptSQL,r_id,sqlInsert,sqlUpdate,sqlCalu;
String strGtcontent,strAuthor,strSignshow="";
sqlInsert="";
if(request.getParameter("root_id")!=null){
	r_id=(String)request.getParameter("root_id");//--跟帖父帖的id,從zw自己來
	String strUser=(String)session.getValue("user");
	String strShow=doit.changecode(strUser);

if(r_id!=null){
  id=java.lang.Integer.parseInt(r_id);
  String strGowhere="readtxt.jsp?idget="+r_id;
 
   
   if(request.getParameter("task")!=null){
    
	String sqlSign="SELECT STR_SIGN FROM LOGIN WHERE STR_USER='"+strUser+"' ";
	ResultSet rs=DB.executeQuery(sqlSign);
	 if(rs.next()){
	   strSignshow=rs.getString("STR_SIGN");
	 }
   if(strSignshow==null){strSignshow="";}
	rs.close();
	
     if(request.getParameter("gt_zw")!=null){
       strGtcontent=(String)request.getParameter("gt_zw");
	   
	   strGtcontent=doit.replace(strGtcontent,false);
	   //strGtcontent="<pre>"+strGtcontent+"</pre>";
	   strAuthor=(String)session.getValue("user"); 
       sqlInsert="INSERT INTO DATA (STR_IP,INT_ROOTID,STR_AUTHOR,STR_DATE,TXT_CONTENT,STR_SIGN) VALUES ('"+request.getRemoteAddr();
       sqlInsert=sqlInsert+"',"+id;
	   sqlInsert=sqlInsert+",'"+strAuthor;
	   sqlInsert=sqlInsert+"','"+doit.strNowtime();
	   sqlInsert=sqlInsert+"','"+strGtcontent;
	   sqlInsert=sqlInsert+"','"+strSignshow+"')";
	   DB.executeUpdate(sqlInsert);
	   sqlUpdate="UPDATE DATA SET INT_RPLYNUMB=INT_RPLYNUMB+1 WHERE INT_ID="+id;
	   DB.executeUpdate(sqlUpdate);
	   sqlCalu="UPDATE LOGIN SET INT_POSTNUMB=INT_POSTNUMB+1 WHERE STR_USER='"+strAuthor+"'";
	   DB.executeUpdate(sqlCalu);
	   
		  }else{out.print("Please Input More!!");
               }

      }
 response.sendRedirect(strGowhere); 
  }
 }
 %>