www.gusucode.com > 盐城分类信息网asp源码程序 > gbook.asp
<!--#include file="inc/md5.asp"-->
<!--#include file="inc/conn.asp"-->
<!--#include file="te.asp"-->
<%
'设置留言版文件名
dim Url
Url="gbook.asp"'Url为留言版的地址
'防SQL注入
squery=lcase(Request.ServerVariables("QUERY_STRING"))
sURL=lcase(Request.ServerVariables("HTTP_HOST"))
allquery=squery+sURL
If InStr(allquery,"%20")<>0 or InStr(allquery,"%27")<>0 or InStr(allquery,"'")<>0 or InStr(allquery,"%a1a1")<>0 or InStr(allquery,"%24")<>0 or InStr(allquery,"$")<>0 or InStr(allquery,"%3b")<>0 or InStr(allquery,";")<>0 or InStr(allquery,"%%")<>0 or InStr(allquery,"%3c")<>0 or InStr(allquery,"<")<>0 or InStr(allquery,">")<>0 or InStr(allquery,"--")<>0 or InStr(allquery,"sp_")<>0 or InStr(allquery,"xp_")<>0 or InStr(allquery,"exec")<>0 or InStr(allquery,"\")<>0 or InStr(allquery,"delete")<>0 or InStr(allquery,"dir")<>0 or InStr(allquery,"exe")<>0 or InStr(allquery,"select")<>0 or InStr(allquery,"Update")<>0 or InStr(allquery,"cmd")<>0 or InStr(allquery,"*")<>0 or InStr(allquery,"^")<>0 or InStr(allquery,"(")<>0 or InStr(allquery,")")<>0 or InStr(allquery,"+")<>0 or InStr(allquery,"copy")<>0 or InStr(allquery,"format")<>0 or not(isnumeric(Request("id"))) then
Response.redirect "/"
Response.End
End If
'过滤代码
Function htmlencode(fString)
If not isnull(fString) then
fString = replace(fString, ">", ">")
fString = replace(fString, "<", "<")
fString = Replace(fString, CHR(32), " ")
fString = Replace(fString, CHR(9), " ")
fString = Replace(fString, CHR(34), """)
fString = Replace(fString, CHR(39), "'")
fString = Replace(fString, CHR(13), "")
fString = Replace(fString, CHR(10) & CHR(10), "</p><p> ")
fString = Replace(fString, CHR(10), "<br> ")
htmlencode = fString
End If
End Function
Function uhtmlencode(fString)
If not isnull(fString) then
fString = Replace(fString, " ", CHR(32))
fString = Replace(fString, " ", CHR(9))
fString = Replace(fString, """, CHR(34))
fString = Replace(fString, "'", CHR(39))
fString = Replace(fString, "", CHR(13))
fString = Replace(fString, "</p><p> ", CHR(10) & CHR(10))
fString = Replace(fString, "<br> ", CHR(10))
uhtmlencode = fString
End If
End Function
'判断是否登陆
Function checkadmin()
If Session("5izt_Admin")="" then
Response.redirect "?action=login"
Response.End
End If
End Function
'获取浏览器action
action=Request.Querystring("action")
'获取浏览器id
Id=Request.Querystring("Id")
'Id是否为空
If Id<>"" and not isnumeric(Id) then
Response.Write "<script>alert('非法的ID！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
%>
<html>
<head>
<title>用户在线留言</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta http-equiv="Content-Language" content="zh-cn">
<style>
body,td,th {
/*文字大小*/
font-size: 12px;
/*文字颜色*/
color: #2E2E2E;
/*文字行距*/
line-height: 20px;
/*滚动条亮边的颜色*/
scrollbar-3dlight-color:#CCCCCC;
/*滚动条空白部分的颜色*/
scrollbar-highlight-color:#CCCCCC;
/*滚动条凸出部分的颜色*/
scrollbar-face-color:#FFFFFF;
/*上下按钮上三角箭头的颜色*/
scrollbar-arrow-color:#CCCCCC;
/*立体滚动条阴影的颜色*/
scrollbar-shadow-color:#FFFFFF;
/*滚动条强阴影的颜色*/
scrollbar-darkshadow-color:#000000;
/*滚动条的基本颜色*/
scrollbar-base-color:#CCCCCC;
/*滚动条的背景颜色*/
scrollbar-track-color:#FFFFFF;
}
a:link {
color: #2E2E2E;
/*删除超链接下划线*/
text-decoration: none;
}
a:visited {
/*删除超链接下划线*/
text-decoration: none;
/*超链接颜色*/
color: #2E2E2E;
}
a:hover {
/*超链接鼠标颜色*/
color: #FF6600;
}
.input {
font-size: 12px;
border: 1px solid #CCCCCC;
background-color: transparent;
width: 130px;
}
.bmit {
font-size: 12px;
border: 1px solid #CCCCCC;
background-color: transparent;
width: 80px;
}
.text{
font-size: 12px;
border: 1px solid #CCCCCC;
background-color: transparent;
}
body {
background-color: #FFFFFF;
}
.STYLE1 {color: #FFFFFF}
</style>
</head>
<body topmargin="0" leftmargin="0" rightmargin="0" bottommargin="0" marginwidth="0" marginheight="0">
<script language="javascript">
//**********添加留言调用**********
function Add(the){
//判断昵称如果为空自动输入“网友”
if(the.Books_Name.value==""){
the.Books_Name.value="网友";
}
//判断昵称不能为以下特殊符号
tChk = /^[^ \s~!@#$%\^\&\*\(\)_\+|\-\=\/\?:;'"\[\{\]\}`\.>,<\\]+$/;
if(!tChk.exec(the.Books_Name.value)){
alert("请输入正确的姓名！\n\n姓名必须在1-10位之间，且不得含有特殊符号！");
the.Books_Name.focus();
return false;
}
//判断昵称能大于5个汉字
if(the.Books_Name.value.length>10){
alert("昵称不能大于5个汉字！");
the.Books_Name.focus();
return false;
}
//判断留言内容只能大于10
if(the.Books_Info.value.length<10){
alert("朋友你这留言也太少了吧，留言不能小于5个汉字！");
the.Books_Info.focus();
return false;
}
//判断留言内容只能小于1200
if(the.Books_Info.value.length>1200){
alert("朋友你在写小说呀？留言不能大于600个汉字！");
the.Books_Info.focus();
return false;
}
}
//**********登陆后台调用**********
function Login(the){
//判断管理员不能为空
if(the.Admin_User.value==""){
alert("管理员用户名不能为空！");
the.Admin_User.focus();
return false;
}
//判断管理员密码不能为空
if(the.Admin_Pass.value==""){
alert("管理员密码不能为空！");
the.Admin_Pass.focus();
return false;
}
}
//**********修改管理员调用**********
function Modify_admin(the){
//判断管理员不能为空
if(the.Admin_User.value==""){
alert("管理员用户名不能为空！");
the.Admin_User.focus();
return false;
}
//判断管理员旧密码不能为空
if(the.Admin_Gps.value==""){
alert("管理员旧密码不能为空！");
the.Admin_Gps.focus();
return false;
}
//判断管理员新密码不能为空
if(the.Admin_Nps.value==""){
alert("管理员新密码不能为空！");
the.Admin_Nps.focus();
return false;
}
//判断管理员新密码不得小于6个字符
if(the.Admin_Nps.value.length<6){
alert("管理员新密码不得小于6个字符！");
the.Admin_Nps.focus();
return false;
}
//判断管理员确认密码不能为空
if(the.Admin_Pass.value==""){
alert("管理员确认密码不能为空！");
the.Admin_Pass.focus();
return false;
}
//判断管理员两次新密码必须相等
if(the.Admin_Nps.value!=the.Admin_Pass.value){
alert("两次新密码不一致！");
the.Admin_Nps.focus();
return false;
}
}
//**********删除留言**********
function Del()
{
if(confirm("请确定是否删除留言！"))
return true;
else
return false;
}
</script>
<%call t()%>
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%" height="100%">
<tr>
<td align="center" valign="middle">
<table border="10" cellpadding="0" style="border-collapse: collapse" width="768" bordercolor="#FFFFFF">
<tr>
<td align="left">
<font color="#008080"> 位置导航：</font><a href="/">首页</a><font color="#008080">→</font> <span class="font2">客户留言</span>
<table border="1" cellpadding="0" cellspacing="0" bordercolor="#7BB2D6" style="border-collapse: collapse" width="100%">
<tr>
<td>
<table border="0" cellpadding="0" style="border-collapse: collapse" width="778" align="center">
<tr>
<td height="1"></td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="padding-top:13px;" height="300"><%
Select Case action
'添加留言调用
Case "add"
'判断是否外部提交
dim From_url,Serv_url
From_url = Cstr(Request.ServerVariables("HTTP_Referer"))
Serv_url = Cstr(Request.ServerVariables("Server_Name"))
If mid(From_url,8,len(Serv_url)) <> Serv_url Then
Response.Write "<script>alert('警告！\n\你正在从外部提交数据！！\n\请立即终止！！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
'二次判断，防止屏蔽JS后提交数据
Books_Name=htmlencode(Request.form("Books_Name"))
Books_Qq=htmlencode(Request.form("Books_Qq"))
Books_Mail=htmlencode(Request.form("Books_Mail"))
Books_Info=htmlencode(Request.form("Books_Info"))
If Books_name="" or Books_mail="" or Books_info="" then
Response.Write "<script>alert('姓名、留言主题、留言内容必须填写！');this.location.href='"&Url&"';</SCRIPT>"
ElseIf len(Books_name)>10 then
Response.Write "<script>alert('昵称能大于5个汉字！');this.location.href='"&Url&"';</SCRIPT>"
ElseIf len(Books_info)>600 or len(Books_info)<5 then
Response.Write "<script>alert('留言内容不能小于5个汉字，大于600个汉字！');this.location.href='"&Url&"';</SCRIPT>"
Else
Set mRs= Server.CreateObject("adodb.recordSet")
mRs.open "Select * from [5izt_Books]", conn, 1, 3
mRs.addnew
mRs("Books_Name") = Books_Name
mRs("Books_Mail") = Books_Mail
mRs("Books_Qq") = Books_Qq
mRs("Books_Info") = Books_Info
mRs("Books_Time") = now()
mRs("Books_Ip") = Request.ServerVariables("REMOTE_ADDR")
mRs.update
mRs.close
Set mRs = nothing
Response.Write "<script>alert('留言添加成功\n\谢谢你对本站的支持，请继续关注我们！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
'回复留言调用
Case "Reply"
checkadmin
If Id="" then
Response.Write "<script>alert('非法操作：删除留言的ID参数不能为空！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
Set mRs=Server.CreateObject("adodb.recordSet")
Sql="Select * from [5izt_Books] where Books_Id="&Id
mRs.open Sql,conn,1,3
mRs("Books_Name")= htmlencode(Request.form("Books_Name"))
mRs("Books_Qq")= htmlencode(Request.form("Books_Qq"))
mRs("Books_Mail")= htmlencode(Request.form("Books_Mail"))
mRs("Books_Info")= htmlencode(uhtmlencode(Request.form("Books_Info")))
mRs("Books_Reply")= htmlencode(Request.form("Books_Reply"))
mRs.update
mRs.close
Set mRs=nothing
Response.Write "<script>alert('留言回复成功！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
'删除留言调用
Case "del"
checkadmin
If Id="" then
Response.Write "<script>alert('非法操作：删除留言的ID参数不能为空！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
conn.execute("delete from [5izt_Books] where Books_Id="&Id)
Response.Write "<script>alert('留言删除成功！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
'修改管理员密码调用
Case "modpassed"
checkadmin
Admin_User=htmlencode(Request.form("Admin_User"))
Admin_Gps=md5(Request.form("Admin_Gps"))
Admin_Nps=md5(Request.form("Admin_Nps"))
Admin_Pass=md5(Request.form("Admin_Pass"))
Set mRs=conn.execute("select * from [5izt_Admin] where Admin_User='"&Session("5izt_Admin")&"' and Admin_Pass='"&Admin_Gps&"'")
If mRs.eof then
Response.Write "<script>alert('旧密码错误？');this.location.href='?action=modpass';</SCRIPT>"
Response.End
End If
conn.execute("update [5izt_Admin] Set Admin_User='"&Admin_User&"',Admin_Pass='"&Admin_Pass&"' where Admin_User='"&Session("5izt_Admin")&"'")
Session.Contents.Remove("5izt_Admin")
Response.Write "<script>alert('修改成功！\n\修改后的用户名为『"&Admin_User&"』\n\返回从新登陆！');this.location.href='"&Url&"';</SCRIPT>"
response.End
'退出后台调用
Case "logout"
Session.Contents.Remove("5izt_Admin")
Response.Write "<script>alert('管理这么长时间了是该休息了（退出管理成功）');this.location.href='"&Url&"';</SCRIPT>"
Response.End
'登陆后台调用
Case "logincheck"
Admin_User=htmlencode(Request.form("Admin_User"))
Admin_Pass=md5(Request.form("Admin_Pass"))
Set mRs=conn.execute("select * from [5izt_Admin] where Admin_User='"&Admin_User&"' and Admin_Pass='"&Admin_Pass&"'")
If not mRs.eof then
Session("5izt_Admin")=mRs("Admin_User")
Response.Write "<script>alert('又到管理留言的时间了（登录成功）！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
Else
Response.Write "<script>alert('不是本站站长请不要乱登陆。');this.location.href='?action=login';</SCRIPT>"
Response.End
End If
'登陆页面
Case "login"
%>
<table border="0" cellpadding="1" cellspacing="1" style="border-collapse: collapse" width="260" bgcolor="#CCCCCC" align="center">
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%">
<tr>
<td height="25"> · 管理登陆 ·</td>
</tr>
</table>
</td>
</tr>
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%">
<form method="post" action="?action=logincheck" onSubmit="return Login(this);">
<tr>
<td width="80" height="30" align="center">管理员：</td>
<td>
<input type="text" name="Admin_User" class="input"></td>
</tr>
<tr>
<td height="30" align="center">密 码：</td>
<td>
<input type="password" name="Admin_Pass" class="input"></td>
</tr>
<tr>
<td height="40" colspan="2" align="center">
<input type="submit" value=" 登录 " class="bmit">
<input type="reset" value=" 重置 " class="bmit"></td>
</tr>
</form>
</table>
</td>
</tr>
</table>
<%
'修改密码页面
Case "modpass"
checkadmin
%>
<table border="0" cellpadding="1" cellspacing="1" style="border-collapse: collapse" width="260" bgcolor="#CCCCCC" align="center">
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%">
<tr>
<td height="25"> · 管理员帐号修改 ·</td>
</tr>
</table>
</td>
</tr>
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%" bgcolor="#F3F3F3">
<form name="form2" method="post" action="?action=modpassed" onSubmit="return Modify_admin(this);">
<tr bgcolor="F3F3F3">
<td height="25" align="center" width="80">登录名：</td>
<td width="186">
<input name="Admin_User" type="text" value="<% =Session("5izt_Admin") %>" maxlength="16" class="input"></td>
</tr>
<tr bgcolor="F3F3F3">
<td height="25" align="center">旧密码：</td>
<td width="186">
<input name="Admin_Gps" type="password" maxlength="16" class="input"></td>
</tr>
<tr bgcolor="F3F3F3">
<td height="25" align="center">新密码：</td>
<td width="186">
<input name="Admin_Nps" type="password" maxlength="16" class="input"></td>
</tr>
<tr bgcolor="F3F3F3">
<td height="25" align="center">确 认：</td>
<td width="186">
<input name="Admin_Pass" type="password" maxlength="16" class="input"></td>
</tr>
<tr bgcolor="F3F3F3">
<td height="40" colspan="2" align="center">
<input type="submit" value=" 修改 " class="bmit">
<input type="reset" value=" 重置 " class="bmit"></td>
</tr>
</form>
</table>
</td>
</tr>
</table>
<%
'回复页面调用
Case "reply"
checkadmin
If Id="" then
Response.Write "<script>alert('非法操作：回复留言的ID参数不能为空！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
Set mRs=conn.execute("select * from [5izt_Books] where Books_Id="&Id)
If mRs.eof then
Response.Write "<script>alert('留言不存在！');this.location.href='"&Url&"';</SCRIPT>"
Response.End
End If
%>
<table border="0" cellpadding="1" cellspacing="1" style="border-collapse: collapse" width="768" bgcolor="#CCCCCC" align="center">
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%">
<tr>
<td height="25"> · 回复留言 ·</td>
</tr>
</table>
</td>
</tr>
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%">
<form method="post" action="?action=Reply&Id=<% =Id %>">
<tr>
<td width="80" height="25" align="center">昵称：</td>
<td>
<input name="Books_Name" type="text" value="<%=request.cookies("cnmai")("username")%>" class="input"></td>
</tr>
<tr>
<td height="25" align="center">Q Q：</td>
<td>
<input name="Books_Qq" type="text" value="<% =mRs("Books_Qq") %>" class="input"></td>
</tr>
<tr>
<td height="25" align="center">主题：</td>
<td>
<input name="Books_Mail" type="text" value="<% =mRs("Books_Mail") %>" class="input"></td>
</tr>
<tr>
<td align="center">留言：</td>
<td>
<textarea name="Books_Info" rows="9" cols="57" class="text"><% =mRs("Books_Info") %></textarea></td>
</tr>
<tr>
<td height="25" align="center">回复：</td>
<td height="100" rowspan="2">
<textarea name="Books_Reply" rows="6" cols="97" class="text"><% =mRs("Books_Reply") %>感谢你对本站的支持，请继续关注本站！</textarea></td>
</tr>
<tr>
<td height="70"></td>
</tr>
<tr>
<td height="30" colspan="2" align="center">
<input type="submit" value=" 回复留言 " class="bmit">
<input type="reset" value=" 重新输入 " class="bmit"></td>
</tr>
</form>
</table>
</td>
</tr>
</table>
<%
mRs.close
Set mRs=nothing
'列表页面调用
Case Else
%>
<table width="868" border="1" align="center" cellpadding="1" cellspacing="1" bordercolor="#2196C6" bgcolor="#2196C6" style="border-collapse: collapse">
<tr>
<td bordercolor="#2196C6" bgcolor="#2196C6"> · 写留言 ·</td>
</tr>
<tr>
<td bgcolor="F3F3F3">
<table border="0" cellpadding="0" style="border-collapse: collapse" width="100%">
<form method="post" action="?action=add" onSubmit="return Add(this);">
<tr>
<td width="80" align="center">昵称：</td>
<td width="153">
<input name="Books_Name" type="text" class="input" value="<%=request.cookies("cnmai")("username")%>"><font color="red">
*</font></td>
<td width="48" align="center">内容：</td>
<td rowspan="4">
<textarea name="Books_Info" rows="9" cols="73" class="text"></textarea><font color="red">
*</font></td>
</tr>
<tr>
<td align="center">Q Q：</td>
<td>
<input name="Books_Qq" type="text" class="input"></td>
<td></td>
</tr>
<tr>
<td align="center">主题：</td>
<td>
<input name="Books_Mail" type="text" class="input"><font color="red">
*</font></td>
<td></td>
</tr>
<tr>
<td colspan="3" align="center">
<input type="submit" value=" 添加留言 " class="bmit">
<input type="reset" value=" 重新输入 " class="bmit"></td>
</tr>
<tr>
<td height="23"></td>
</tr>
</form>
</table>
</td>
</tr>
</table>
<table width="868" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#2196C6" bgcolor="#CCCCCC" style="border-collapse: collapse">
<tr>
<td bgcolor="F3F3F3">
<table width="100%" border="1" cellpadding="0" bordercolor="#2196C6" style="border-collapse: collapse">
<tr>
<td height="25" bgcolor="#2196C6"> · 留言列表 ·</td>
</tr>
</table>
</td>
</tr>
<tr>
<td bgcolor="F3F3F3">
<table width="100%" border="1" cellpadding="0" bordercolor="#2196C6" style="border-collapse: collapse">
<%
Sql="select * from [5izt_Books] order by Books_Id desc"
Set mRs=Server.CreateObject("adodb.recordSet")
mRs.open sql,conn,1,1
If mRs.bof and mRs.eof then
Response.Write"<span>没有任何记录</span>"
Response.End
Else
mRs.PageSize =12'每页记录条数
iCount=mRs.RecordCount '记录总数
iPageSize=mRs.PageSize
maxpage=mRs.PageCount
page=request("page")
If Not IsNumeric(page) or page="" then
page=1
Else
page=cint(page)
End If
If page<1 then
page=1
ElseIf page>maxpage then
page=maxpage
End If
mRs.AbsolutePage=Page
If page=maxpage then
x=iCount-(maxpage-1)*iPageSize
Else
x=iPageSize
End If
End If
for i=1 to mRs.pagesize
%>
<tr>
<td>
<A name=<% =mRs("Books_id") %>></A>
<table width="100%" border="0" cellpadding="0" bordercolor="#2196C6" style="border-collapse: collapse">
<tr>
<td width="5%" height="25" align="center">
<font color="#006699" face="wingdings"><% Response.Write(""&CStr(i)&"") %></font></td>
<td width="65%">昵称为：<a href="per.asp?username=<% =mRs("Books_Name") %>"><b><% =mRs("Books_Name") %></b></a>在<font color="#006699"><% =mRs("Books_Time") %></font>的留言：
<%
If Session("5izt_Admin")<>"" then
Response.Write " <a href='?action=reply&Id="&mRs("Books_Id")&"' style='color:red'>回复</a>"
Response.Write " <a href='?action=del&Id="&mRs("Books_Id")&"'onclick=""return Del(this);"" style='color:red'>删除</a>"
Response.Write " <font color='red'>IP为："&mRs("Books_Ip")&"</font>"
End If
%></td>
<td width="30%">
<a target="_blank" href="http://wpa.qq.com/msgrd?V=1&Uin=<% =mRs("Books_Qq") %>&Site=&Menu=yes">
<font color="#006699" face="wingdings">''</font></a> <font color=red>主题:<% =left(mRs("Books_mail"),14)%></font> </td>
</tr>
<tr>
<td height="1" colspan="3" bgcolor="#CCCCCC">
</td>
</tr>
<tr>
<td height="32"></td>
<td colspan="2">
<table border="0" cellpadding="0" style="border-collapse: collapse;table-layout:fixed;word-break:break-all;" width="100%">
<tr onMouseOver="javascript:this.bgColor='#FFFFFF';" onMouseOut="javascript:this.bgColor='#EFEFEF';">
<td><% = mRs("Books_Info") %><%
If mRs("Books_Reply")<>"" then
Response.Write"<span style='color:#006699'><br><b>回复：</b><br>"&mRs("Books_Reply")&"</span>"
End If
%></td>
</tr>
</table>
</td>
</tr>
</table>
<%
mRs.movenext
If mRs.eof then exit for
next
mRs.close
Set mRs=nothing
%></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<table width="868" height="66" border="1" align="center" cellpadding="0" bordercolor="#2196C6" style="border-collapse: collapse">
<tr>
<td height="1"></td>
</tr>
<tr>
<td height="30" bordercolor="#2196C6" bgcolor="#2196C6"><span style="padding-top:13px;">
<%
call PageControl(iCount,maxpage,page,"border=0 align=center","<p align=center>")
Sub PageControl(iCount,pagecount,page,table_style,font_style)
'生成上一页下一页链接
Dim query, a, x, temp
action = "http://" & Request.ServerVariables("HTTP_HOST") & Request.ServerVariables("SCRIPT_NAME")
query = Split(Request.ServerVariables("QUERY_STRING"), "&")
For Each x In query
a = Split(x, "=")
If StrComp(a(0), "page", vbTextCompare) <> 0 Then
temp = temp & a(0) & "=" & a(1) & "&"
End If
Next
Response.Write("<table border='0' style='border-collapse: collapse' width='768' align='center'>")
Response.Write("<form method=get onsubmit=""document.location = '" & action & "?" & temp & "Page='+ this.page.value;return false;""><tr>")
Response.Write("<td align='center'>")
If page<=1 then
Response.Write ("首页 " )
Response.Write ("上一页 ")
Else
Response.Write("<a href=" & action & "?" & temp & "Page=1>首页</a> ")
Response.Write("<a href=" & action & "?" & temp & "Page=" & (Page-1) & ">上一页</a> ")
End If
If page>=pagecount then
Response.Write ("下一页 ")
Response.Write ("尾页 ")
Else
Response.Write("<a href=" & action & "?" & temp & "Page=" & (Page+1) & ">下一页</a> ")
Response.Write("<a href=" & action & "?" & temp & "Page=" & pagecount & ">尾页</a> ")
End If
Response.Write(" 页次：" & page & "/" & pageCount & "页")
Response.Write(" 共有" & iCount & "条留言")
Response.Write(" 转到" & "<input tyep=text name=page maxlength=5 value=" & page & " style='font-size: 12px;border: 1px solid #CCCCCC;width:23px;'>" & "页 <input type=submit style=""font-size: 9pt"" value=GO style='font-size: 12px;border: 1px solid #CCCCCC;width:23px;'>")
Response.Write("</td></tr></form>")
Response.Write("</table>")
End Sub
End Select
conn.close
Set conn=nothing
%>
</span></td>
</tr>
</table>
</table>
<p align="center"><!--#include file="foot.asp"--></p>
</body>
</html>