<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="cn.asp"-->
<%
Function killBadWords(str)
badword="妈**|你**|操|滚|黄片|我靠|fuck|bitch|他**|性爱|法轮功|法轮|falundafa|falun|主席|泽民|我**|三级片|洪志|锦涛|王八|王八蛋"
If Not(IsNull(badword) or isnull(Str)) Then
'通过split函数，badwords成了程度为16的一维叔祖
badwords = split(badword, "|")
'wordnum保存数组的元素个数
wordnum=UBound(badwords)
For i = 0 to wordnum
str = Replace(str, badwords(i), string(len(badwords(i)),"*"))
Next
killBadWords = str
End If
End Function
dim to_user,title,words
to_user=Trim(Request("to_user"))
title=Trim(Request("title"))
words=Trim(Request("words"))

dim rs_chk
set rs_chk=server.CreateObject("adodb.recordset")
rs_chk.open "select * from user1 where user_name='"&to_user&"'",cn,1,1
if rs_chk.eof then
response.Write "<script>alert('发送失败：收件人不存在');history.back();</script>"
response.End()
end if
dim rs
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from user1 where user_name='"&session("user_name")&"'",cn,1,1
If rs("vip")=False then
words=killBadWords(words )
title=killBadWords(title )
end if
If Not rs.Eof then
If rs("words_enable")=false then
response.Write "<script>alert('您是普通用户，一个月只能发送10条留言！');history.back();</script>"
response.End()
end if
end if
If rs("vip")=False then
if (Len(words)>200) then
response.Write "<script>alert('您是普通用户，发送留言的字数不能超过200个字！');history.back();</script>"
response.End()
end if
Else
if (Len(words)>400) then
response.Write "<script>alert('发送留言的字数不能超过400个字！');history.back();</script>"
response.End()
end if
End if
dim rs_out,rs_in
dim sql_out,sql_in
sql_out="insert into outbox (user_name,to_username,title,words,vip) values('"
sql_out=sql_out&session("user_name")&"','"
sql_out=sql_out&to_user&"','"
sql_out=sql_out&title&"','"
sql_out=sql_out&words&"','"
if session("vip")=True then
vp=1
elseif session("vip")=False then
vp=0
end if
sql_out=sql_out&vp&"')"
cn.execute sql_out

set rs_in=server.CreateObject("adodb.recordset")
rs_in.open "select * from inbox",cn,1,3
rs_in.addnew()
rs_in("user_name")=to_user
rs_in("from_username")=session("user_name")
rs_in("title")=title
rs_in("words")=words
rs_in.update()
response.Redirect("message.asp")

%>