<!--#include file="info.asp"-->
<!--#include file="conn.asp"-->
<%
if session("id")="" or session("ac")="" or session("user")="" then
response.write "<script language=JavaScript>" & chr(13) & "alert('您不具備此權限！');" & "history.back()" & "</script>" 
Response.End
end if
if request("ttype")<>"1" and request("ttype")<>"2" then
response.write "<script language=JavaScript>" & chr(13) & "alert('系統信息！請勿回復！');" & "history.back()" & "</script>" 
end if
call codeistrue("")
if request("ttype")="1" then 
sql="select name from in_user where id="&clng(request("tid"))
ttype="1"
else
sql="select name from en_user where id="&clng(request("tid"))
ttype="2"
end if
rs.open sql,conn,1,1
if rs.recordcount=0 then
rs.close
set rs=nothing
response.write "<script language=JavaScript>" & chr(13) & "alert('非法數據提交！');" & "window.close()" & "</script>" 
Response.End
end if
rs.close
if request("title")="" then
response.write "<script language=JavaScript>" & chr(13) & "alert('主題不能為空！');" & "history.back()" & "</script>" 
Response.End
end if
if request("content")="" then
response.write "<script language=JavaScript>" & chr(13) & "alert('信息內容不能為空！');" & "history.back()" & "</script>" 
Response.End
end if
sql="insert into message(ttype,tid,ftype,fid,content,title) values('"&ttype&"',"&request("tid")&",'"&session("user")&"',"&session("id")&",'"&request("content")&"','"&request("title")&"')"
rs.open sql,conn,1,2
set rs=nothing
set conn=nothing
response.write "<script language=JavaScript>" & chr(13) & "alert('發送成功！');" & "window.close()" & "</script>" 
%>