<%
' Declaring variables
Dim message, data_source, con, sql_insert
' A Function to check if some field entered by user is empty
Function ChkString(string)
If string = "" Then string = " "
ChkString = Replace(string, "'", "''")
End Function
' Receiving values from Form
newsid = ChkString(Request.Form("newsid"))
name = ChkString(Request.Form("name"))
website = ChkString(Request.Form("website"))
email = ChkString(Request.Form("email"))
comment = ChkString(Request.Form("comment"))
spamcheck = ChkString(Request.Form("spamcheck"))
ip = Request.Servervariables("REMOTE_HOST")
spam = Request.Form("spam")
nospam = Request.Form("nospam")
data_source = "DRIVER={MySQL}; Server=mydb6.surf-town.net; Database=spoforum; Uid=spoaddi_php; Password=smovs;"
if spamcheck = "dod" Then
sql_insert = "INSERT 16ccomments SET newsid = '" & newsid & "', name = '" & name & "', website = '" & website & "', email = '" & email & "', comment = '" & comment & "', ip = '" & ip & "' "
' Creating Connection Object and opening the database
Set con = Server.CreateObject("ADODB.Connection")
con.Open data_source
con.Execute sql_insert
' Done. Close the connection
con.Close
Set con = Nothing
strHTML = "Yeah! Tak " & name & ", din kommentar er gemt og vil fra nu af goere stor glaede hos alle der besoeger 16c's nyhedsside. Du kan selv nyde den lige her"
elseif spamcheck = "dods" Then
sql_insert = "INSERT 16ccomments SET newsid = '" & newsid & "', name = '" & name & "', website = '" & website & "', email = '" & email & "', comment = '" & comment & "', ip = '" & ip & "' "
' Creating Connection Object and opening the database
Set con = Server.CreateObject("ADODB.Connection")
con.Open data_source
con.Execute sql_insert
' Done. Close the connection
con.Close
Set con = Nothing
strHTML = "Yeah! Tak " & name & ", din kommentar er gemt og vil fra nu af goere stor glaede hos alle der besoeger 16c's nyhedsside. Du kan selv nyde den lige her"
elseif spam > 0 Then
sql_insert = "UPDATE 16ccomments SET spam = '1',`date` = `date` WHERE id = '" & spam & "' "
' Creating Connection Object and opening the database
Set con = Server.CreateObject("ADODB.Connection")
con.Open data_source
con.Execute sql_insert
' Done. Close the connection
con.Close
Set con = Nothing
strHTML = "Kommentaren er markeret som spam
Tilbage til nyhedssiden"
elseif nospam > 0 Then
sql_insert = "UPDATE 16ccomments SET spam = '0', `date` = `date` WHERE id = '" & nospam & "' "
' Creating Connection Object and opening the database
Set con = Server.CreateObject("ADODB.Connection")
con.Open data_source
con.Execute sql_insert
' Done. Close the connection
con.Close
Set con = Nothing
strHTML = "Kommentaren er markeret som spam
Tilbage til nyhedssiden"
else
strHTML = "Du har svaret forkert paa spoergsmaalet! Du er enten en taabe eller en bot...."
End if
%>
16c's nyheds skrive ting
<%=strHTML%>