<% '################################################################################# '# Copyright (C) 2002 John Andersson '# '# This program is free software; you can redistribute it and/or '# modify it under the terms of the GNU General Public License '# as published by the Free Software Foundation; either version 2 '# of the License, or any later version. '# '# All copyright notices regarding ZIXForum '# must remain intact in the scripts and in the outputted HTML '# The "powered by" text/logo with a link back to '# http://www.zixforum.com in the footer of the pages MUST '# remain visible when the pages are viewed on the internet or intranet. '# '# This program is distributed in the hope that it will be useful, '# but WITHOUT ANY WARRANTY; without even the implied warranty of '# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the '# GNU General Public License for more details. '# '# '# Support can be obtained from support forums at: '# http://www.zixforum.com '# '# Correspondence and Marketing Questions can be sent to: '# zixforum@zixforum.com '################################################################################# ' Rev 1.12 checked 2002/02/26 S_Icon = Request.Form("S_Icon") SubID = Request.Form("SubID") MailCheck = Request.Form("MailCheck") S_User = session("Userid") S_Headline = FixaTecken(request.form("S_Headline")) S_Desc = FixaTecken(request.form("S_Desc")) S_Name = FixaTecken(request.form("S_Name")) S_Email = FixaTecken(request.form("S_Email")) If IllegalChars(SubID)=True Then Response.redirect("no_access.asp") End If if AllowHtml = 1 then S_Desc = S_Desc S_Desc = SpaceStr(S_Desc,70) else S_Desc = server.htmlencode(S_Desc) S_Desc = SpaceStr(S_Desc,70) S_Headline = server.htmlencode(S_Headline) S_Name = server.htmlencode(S_Name) S_Email = server.htmlencode(S_Email) end if SQLIns = "INSERT INTO Subjects (H_ID, S_Icon, S_Headline, S_Desc, S_Name, S_Email,MailCheck,S_User) VALUES (" & SubID & ", " & S_Icon & ", '" & S_Headline & "', '" & S_Desc & "','" & S_Name & "', '" & S_Email &"',0"& MailCheck &",0"& S_User &")" Conn.Execute(SQLIns) if StrMembersStatus = 1 then M_ID = session("Userid") Set RS = Conn.Execute("SELECT M_Post from Members WHERE M_ID="& M_ID &"") Conn.Execute "UPDATE Members SET M_Post = " & (CStr(RS("M_Post")) + 1) & " WHERE M_ID = " & M_ID end if if StrMembersStatus = 1 and mail = 1 and UseSubscrive = 1 then %> <% end if Response.Cookies(StrTitle).Expires = Now() + 365 Response.Cookies(StrTitle)("S_Name") = Request.Form("S_Name") Response.Cookies(StrTitle)("S_Email") = Request.Form("S_Email") Response.redirect "forum.asp?H_ID=" & SubID &"&pageid=2" %>