")
str=Replace(str,Chr(10),"
")
HtmlEncode=str
End Function
if request.QueryString("myshow")="blank.gif" then response.Redirect("showimg.asp")
sub addcomment()
myshow=trim(request.Form("myshow"))
username=HtmlEncode(trim(request.Form("username")))
content=HtmlEncode(request.Form("content"))
if username<>"" and content<>"" and myshow<>"" then
sql="insert into [comment] ([username],[update],[contents],myshow) values('"&username&"','"&now()&"','"&content&"','"&myshow& "')"
response.Write(sql)
conn.execute(sql)
call DataDisConnect
response.redirect("showcomment.asp?myshow="&myshow)
response.end
end if
end sub
call DataConnect
if request.form("submit")<>"" then call addcomment
call DataDisConnect
%>