<%@ page contentType="text/html; charset=gb2312" language="java" import="java.util.*,com.jspsmart.upload.*" errorPage="" %>
<%@ page import="java.sql.*"%> 
<%@ page import="java.util.Date"%>
<%@ page import="java.text.*"%>
<%//@ page import="com.jspsmart.upload.*" %>
<%@ include file="checkbbsuser.jsp"%>
<%@ include file="../inc/conn.jsp"%>
<%@ include file="../inc/ftbbstohtml.jsp"%>

<%//!int picsize;%>
<%!String remenu,sql,strsql,strDest="";%>
<%
    String content,bbs_img;
    ResultSet rs1,rs2,rs3,rs5;
	String IP=request.getRemoteAddr();
    Date currTime = new Date();
    SimpleDateFormat formatter = new SimpleDateFormat("yyyy-MM-dd hh:mm:ss",Locale.US);
    String ftime=new String(formatter.format(currTime).getBytes("iso-8859-1"));
	
    SimpleDateFormat formatter2 = new SimpleDateFormat("yyyyMMddhhmmss",Locale.US);
    String ptime=new String(formatter2.format(currTime).getBytes("iso-8859-1"));
	
    sql="select * from config where kind=3 order by id asc";
    Statement stmt5=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
    rs5=stmt5.executeQuery(sql);
	rs5.next();
	//if(rs5.next())
	//{
	int picsize = Integer.parseInt(rs5.getString("content"));
	//}
	//picsize=204800;

SmartUpload su = new SmartUpload();
su.initialize(pageContext);
su.upload();

com.jspsmart.upload.File file = su.getFiles().getFile(0);
if (!file.isMissing()){
String myFileName=file.getFileName();//取得上載的文件的文件名
String  suffix=myFileName.substring(0,myFileName.lastIndexOf('.'));//取得不帶后綴的文件名

int fileSize=file.getSize();//取得文件的大小

String ext= su.getFiles().getFile(0).getFileExt(); //取得后綴名
//String picname = ptime + "."+ext;
//picname = ptime + "."+ext;
if(fileSize>picsize)
{
   out.print("<script language='javascript'>");
   out.print("alert('你上傳文件太大了！');");
   out.print("history.go(-1);");
   out.print("</script>");
   out.close();
   return;
}
if (ext.equals("gif")||ext.equals("GIF")||ext.equals("jpg")||ext.equals("JPG"))
{
}
else
{
   out.print("<script language='javascript'>");
   out.print("alert('只能上傳gif,jpg文件類型！');");
   out.print("history.go(-1);");
   out.print("</script>");
   out.close();
   return;
}

	bbs_img = ptime+"."+ext;//file.getFileName();
	
file.saveAs("/upfile/"+ptime+"."+ext);//將文件保存在服務器端
}
else{
bbs_img = "";
}
    int pid = Integer.parseInt(su.getRequest().getParameter("id"));
    String BoardID_1 = su.getRequest().getParameter("BoardID_1");
    String BoardID_2 = su.getRequest().getParameter("BoardID_2");
	remenu = su.getRequest().getParameter("remenu");
	//String bbs_img = ptime+"."+ext;//file.getFileName();
	String bbs_img_text = su.getRequest().getParameter("bbs_img_text");
    String Sql_arrest="select * from BBS_arrest where (kind='Keyword' or kind='IP') order by id asc";
    Statement stmt3=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
    rs3=stmt3.executeQuery(Sql_arrest);
	if(rs3.next()){
	   content=rs3.getString("content");
	   if(remenu.indexOf(content)!=-1||IP.indexOf(content)!=-1)
	   {
           out.print("<script language='javascript'>");
           out.print("alert('對不起，回復內容中不能含有"+rs3.getString("content")+"關鍵字或你的IP被禁止！');");
           out.print("history.go(-1);");
           out.print("</script>");
           out.close();
	   }
	 }	
	//加入引用內容
	String str2="[/quote]";
	if(remenu.indexOf(str2)!=-1){ 
	   int b=remenu.lastIndexOf("[/quote]");
	   int len=remenu.length();
	   String reid=remenu.substring(7,b);
	   out.print(reid);
	   String sqlid="select top 1 * from bbsmenu where id="+reid;
       Statement stmt2=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
       rs2=stmt2.executeQuery(sqlid);
	   if(rs2.next()){
	   String keyxx="<font color=#568AC2>回復: "+rs2.getString("user_id")+"</font>";
	   String keyLY="<table width=99% border=0 align=center cellpadding=4 cellspacing=1 bgcolor=#999999><tr><td bgcolor=#ffffee>"+ keyxx +"<br>"+ rs2.getString("remenu") +"</td></tr></table>";
	   String keyab="[quote]"+reid+"[/quote]";
	   int intFromLen = keyab.length(); 
	   int intPos; 
	   while((intPos=remenu.indexOf(keyab))!=-1){ 
	      strDest = remenu.substring(0,intPos); 
	      strDest = strDest + keyLY; 
	      remenu = remenu.substring(intPos+intFromLen); 
	      } 
	      strDest = strDest + remenu; 
		  remenu=strDest;
	   }
	     
     }
	//remenu = htmln(remenu);
   String str="select id,title,name,BoardID_1,BoardID_2,rep,htmfilename,P_display,postnum from bbstitle where id="+pid;
    Statement stmt1=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
    rs1=stmt1.executeQuery(str);
	 if(rs1.next())
	{
	    if (rs1.getObject("P_display").toString().equals("0"))
	       {
           out.print("<script language='javascript'>");
           out.print("alert('該主題貼被禁止回貼！');");
           out.print("history.go(-1);");
           out.print("</script>");
           out.close();
		   }
	   }
    if(bbs_img==null||bbs_img.equals("")){
    sql="insert into bbsmenu(pid,BoardID_1,BoardID_2,user_id,rename,remenu,reip,date1,kind,bbs_img_display,bbs_img_text,img_url_display,deleted)";
    sql=sql+" values("+pid+",'"+BoardID_1+"','"+BoardID_2+"','"+(String)session.getAttribute("bbsuser")+"','"+(String)session.getAttribute("name")+"','"+remenu+"','"+IP+"','"+ftime+"',0,1,'"+bbs_img_text+"',0,0)";
    }
	else{
	sql="insert into bbsmenu(pid,BoardID_1,BoardID_2,user_id,rename,remenu,bbs_img,reip,date1,kind,bbs_img_display,bbs_img_text,img_url_display,deleted)";
    sql=sql+" values("+pid+",'"+BoardID_1+"','"+BoardID_2+"','"+(String)session.getAttribute("bbsuser")+"','"+(String)session.getAttribute("name")+"','"+remenu+"','"+bbs_img+"','"+IP+"','"+ftime+"',0,1,'"+bbs_img_text+"',0,0)";
	}
	Statement stmt10=conn.createStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,ResultSet.CONCUR_UPDATABLE);
	stmt10.executeUpdate(sql);
	
    strsql="update bbstitle set rep=rep+1,postnum=postnum+1,redate=DATE() where id="+pid;
    stmt10.executeUpdate(strsql);
	
    strsql="update BBS_Cate set BBS_Cate_Reply=BBS_Cate_Reply+1 where BBS_Cate_ID='"+BoardID_1+"'";
    stmt10.executeUpdate(strsql);
    if(BoardID_2!=null)
	{
	strsql="update BBS_Cate set BBS_Cate_Reply=BBS_Cate_Reply+1 where BBS_Cate_ID='"+BoardID_2+"'";
	stmt10.executeUpdate(strsql);
     }
    if((String)session.getAttribute("bz")!="1"){
    strsql="update clubuser set jingyuan=jingyuan+5,tili=tili-10 where clubuser_name='"+(String)session.getAttribute("name")+"'";
    stmt10.executeUpdate(strsql);
     }
	 stmt10.close();
	
	 /*out.print(pid);*/
	 //response.sendRedirect("checkasp.jsp?id="+pid);
		
	%><html>
	<body>
	<form action="checkasp.jsp?id=<%=pid%>"  method="post">
	 <input type="submit" name="返回到checkasp.jsp">
	</form>
	</body>
	</html>