<!--#include file="D_lj.asp" -->
<%
	tiezi=request("tiezi")
	set czhutie=lj.execute("select tiezi from tiezi where xuhao="& tiezi &"")
	ztiezi=cint(czhutie("tiezi"))
	xinqing=Request.Form("xinqing")
	neirong=request.form("neirong")
		if len(neirong)>65535 then
			response.Redirect("b_hxiugai.asp?fanhui=duo&dongzuo=xiugai&tiezi="& tiezi &"")
		end if
	neirong=replace(neirong,"'","@#$%3v42q")
	mingzi=request.Cookies("mingzi")
	cmima=request.Cookies("mima")
		if Instr(mingzi,"=")>0 or Instr(mingzi,"'")>0 or Instr(mingzi,"(")>0 or Instr(mingzi,")")>0 then
			response.Redirect("b_bankuai.asp")
		end if
	set yz=lj.execute("select mima from huiyuan where mingzi='"& mingzi &"'")
	if yz("mima")<>cmima then
		response.Redirect("b_bankuai.asp")
	end if
		if neirong="" then
			response.Redirect("b_hxiugai.asp?fanhui=kong&dongzuo=xiugai&tiezi="& tiezi &"")
		end if
	lj.execute("update tiezi set xinqing="& xinqing &",neirong='"& neirong &"' where xuhao="& tiezi &"")
	response.Redirect("b_kantie.asp?tiezi="& ztiezi &"")
%>