<%
Set UploadForm = Server.CreateObject("SiteGalaxyUpload.Form")
myDB = Server.MapPath("board.mdb")
strConnect = "Driver={Microsoft Access Driver (*.mdb)}; DBQ=" & myDB
Set Dbconnect = Server.CreateObject("ADODB.Connection")
Dbconnect.Open(strConnect)
if UploadForm("name") = "" then
set reqfield=Dbconnect.execute("select * from " & session("linktable") & " where 일련번호 = " & request.querystring("seqnum"))
textdata = reqfield.fields("내용")
textdata = Replace(textdata, "&", "&")
textdata = Replace(textdata, "<BR>", chr(13))
textdata = Replace(textdata, " ", chr(32))
textdata = Replace(textdata, ">", ">")
textdata = Replace(textdata, "<", "<")
textdata = Replace(textdata, "
", chr(13))
textdata = Replace(textdata, "''", "'")
session("seqnum") = request.querystring("seqnum")
else
%>
<%
SQLString = "select count(*) from " & session("linktable") & " where 일련번호=" & session("seqnum") & " and 암호='" & UploadForm("pwd") & "'"
set pwdchk = Dbconnect.Execute(SQLString)
if pwdchk.fields(0) = 0 and Uploadform("pwd")&";" <> mid(session("dsn"),instr(session("dsn"),"PWD")+4) then
Dbconnect.close
set Dbconnect=nothing
%>
<%
else
wdate = Year(now) & "-" & Month(now) & "-" & Day(now)
'-----------내용 정리 --------------
textdata = Replace(textdata, "'", "''")
textdata = Replace(textdata, chr(32), " ")
textdata = Replace(textdata, chr(13), "
")
'-----------내용 정리 --------------
%>
<%
Dbconnect.execute("update " & session("linktable") & " set " &_
" 입력일자 = '" & wdate & "'," &_
" 이름 = '" & UploadForm("name") & "'," &_
" 전자메일 = '" & UploadForm("email") & "'," &_
" 제목 = '" & subject & "'," &_
" 내용 = '" & textdata & "' where 일련번호 = " & session("seqnum"))
Dbconnect.close
set Dbconnect=nothing
response.redirect "boardlist.asp"
end if
end if
%>
너방 우리방