<% function LoseHtml(ContentStr) Dim ClsTempLoseStr,regEx ClsTempLoseStr = Cstr(ContentStr) Set regEx = New RegExp regEx.Pattern = "]*>" regEx.IgnoreCase = True regEx.Global = True ClsTempLoseStr = regEx.Replace(ClsTempLoseStr,"") ClsTempLoseStr = Replace(ClsTempLoseStr," ","") LoseHtml = Replace(ClsTempLoseStr," ","----") End function dim wt_id1,wt_id2,rs,sql,bf_content,action if S_userid="" or S_Username="" then Response.Write "" Response.End else Call OpenConn() sql = "Select userid,username From userinfo where userid="&S_userid&" and username='"&S_Username&"'" set rs = Conn.Execute(Sql) if rs.EOF and rs.BOF then Response.Write "" Response.End else %> <% wt_id1=Request("wt_id1") wt_id2=Request("wt_id2") action=Request("action") bf_content=LoseHtml(Request.Form("bf_content")) if action="sj" then sql = "insert into FBusFeedback (bf_ccid,bf_adtime,bf_content,bf_bsuserid) values ("&wt_id2&",'"&now()&"','"&bf_content&"',"&wt_id1&")" conn.Execute(sql) end if if action="kh" then sql = "update FBusFeedback set bf_custime='"&now()&"',bf_custfdb='"&bf_content&"' where bf_id="&wt_id1&"" conn.Execute(sql) end if Response.Redirect Request.ServerVariables("HTTP_REFERER") %> <% end if end if %>