<!--#INCLUDE FILE="conn.asp"-->
<!--#include file="comSub.asp"-->
<!--#include file="function.asp"-->

<%
if Request("addfriendtext")<>"" then
        call addfriendt(Trim(Request("addfriendtext")))
end if
if Request("delfriendtext")<>"" then
       call delfriendt(Trim(Request("delfriendtext")))
end if
if Request("blackText")<>"" then
        call addBlackN(Trim(Request("blackText")))
end if
if Request("selT")<>"" then
       call delBlackN(Trim(Request("selT")))
end if
if Request("blackIPText")<>"" then
        call addBlackIP(Trim(Request("blackIPText")))
end if
if Request("selIP")<>"" then
       call delBlackIP(Trim(Request("selIP")))
end if
if Request("isautoreply") = "ok" then
    If session("tslt_useridentity")=1 Or session("tslt_useridentity")=2 Then
        call autoreply(Request("texta"),Request("chk"))
    End If
end if
if Request("menu")="del" then
        conn.execute("delete from [sitenote] where id="&Request("id")&"")
end if
if Request("menu")="alldel" then
       conn.execute("delete from [sitenote] where incept='"&session("tslt_username")&"'")
end if

Dim page2
If request("page")="" Then
    page2=1
Else
    page2=request("page")
End If 
%>
<META HTTP-EQUIV="Refresh" content="1; URL=sitenote.asp?page=<%=page2%>&communitytositenote=<%=request("communitytositenote")%>&communityid=<%=request("communityid")%>&boardtositenote=<%=request("boardtositenote")%>&boardid=<%=request("boardid")%>">

<%
Call conn_Nothing()

sub addfriendt(aaa)
    dim sql,rs
    sql="select ID from ts_userinfo where username='"&aaa&"'"
    set rs=conn.Execute(sql)
        if rs.bof or rs.eof then
            %>
            <script language=JavaScript>
                    alert ("û <%=aaa%>  ")
            </script>
            <%
        else
			Dim rs2,sql2
            sql2="select friend,blackMenu from ts_userinfo where username='"&session("tslt_username")&"'"
            set rs2=conn.Execute(sql2)
                If instr(rs2("blackMenu"),aaa)<>False Then
                    %>
					<script language=JavaScript>
                            alert ("û <%=aaa%> ںдڣͷŸû")
                    </script>
                    <%
				Else
                     dim friend2
                     friend2 = rs2("friend")
                     if friend2<>"" then
                         dim fff
                         fff = Split(friend2, "|")
                         Dim i,friendname
                         For i = UBound(fff) To 0 step-1
                             friendname=fff(i)                 
                             if friendname=aaa then
                                  Response.redirect Request.ServerVariables("HTTP_REFERER")
                                  Response.End
                              end if
                          next
                          friend2= friend2 & aaa&"|"
                          conn.Execute("update ts_userinfo set friend='"&friend2&"' where username='"&session("tslt_username")&"'")
                           %>
                           <script language=JavaScript>
                                   alert (" <%=aaa%> ɹ ")
                           </script>
                           <%
                     else
                         friend2= "|" & aaa & "|"
                         conn.Execute("update ts_userinfo set friend='"&friend2&"' where username='"&session("tslt_username")&"'")
                         %>
                         <script language=JavaScript>
                                  alert (" <%=aaa%> ɹ ")
                         </script>
                         <%
                     end If
			    End If 
            rs2.close              
            Set rs2 = Nothing                     
        end if
    rs.close              
    Set rs = Nothing
end sub

sub delfriendt(aaa)
        sql="select friend from ts_userinfo where username='"&session("tslt_username")&"'"
        set rs=conn.Execute(sql)
                 dim friend2
                 friend2=rs("friend")
                 if instr(friend2,aaa)<>false then
                         friend2=replace(friend2,"|"&aaa&"|","|")
                         conn.Execute("update ts_userinfo set friend='"&friend2&"' where username='"&session("tslt_username")&"'")
                         %>
                         <script language=JavaScript>
                                  alert ("Ӻб޳ <%=aaa%> ɹ  !")
                        </script>
                        <%
                end if
        rs.close
       Set rs = Nothing
end sub

sub addBlackN(aaa)
    dim sql,rs
    sql="select blackMenu,bclass from ts_userinfo where username='"&aaa&"'"
    set rs=conn.Execute(sql)
        if rs.bof and rs.eof then
             %>
             <script language=JavaScript>
                      alert ("û <%=aaa%>  ")
             </script>
             <%
        else
             if (rs("bclass")=1 or rs("bclass")=2 or rs("bclass")=3)  then
                 exit sub
             end if
			 Dim rs2,sql2
             sql2="select friend,blackMenu from ts_userinfo where username='"&session("tslt_username")&"'"
             set rs2=conn.Execute(sql2)
                 If instr(rs2("friend"),aaa)<>False Then
                     %>
					 <script language=JavaScript>
                             alert ("û <%=aaa%> ںдڣͷŸû")
                     </script>
                     <%
				 Else
                     dim blackMenu2
                     blackMenu2 = rs2("blackMenu")
                     if blackMenu2<>"" then
                         dim fff
                         fff = Split(blackMenu2, "|")
                         Dim i,blackName
                         For i = UBound(fff) To 0 step-1
                              blackName=fff(i)                 
                              if blackName=aaa then
                                  Response.redirect Request.ServerVariables("HTTP_REFERER")
                                  Response.End
                              end if
                          next
                          blackMenu2= blackMenu2 & aaa&"|"
                          conn.Execute("update ts_userinfo set blackMenu='"&blackMenu2&"' where username='"&session("tslt_username")&"'")
                          %>
                          <script language=JavaScript>
                                  alert (" <%=aaa%> ɹ ")
                          </script>
                          <%
                     else
                          blackMenu2= "|" & aaa & "|"
                          conn.Execute("update ts_userinfo set blackMenu='"&blackMenu2&"' where username='"&session("tslt_username")&"'")
                          %>
                          <script language=JavaScript>
                                  alert (" <%=aaa%> ɹ ")
                          </script>
                          <%
                     end If
				 End If 
             rs2.close
             Set rs2 = Nothing
        end if
    rs.close              
    Set rs = Nothing
end sub

sub delBlackN(aaa) 
         sql="select blackMenu from ts_userinfo where username='"&session("tslt_username")&"'"
         set rs=conn.Execute(sql)
                dim blackMenu2
                blackMenu2=rs("blackMenu")
                if instr(blackMenu2,aaa)<>false then
                       blackMenu2=replace(blackMenu2,"|"&aaa&"|","|")
                       conn.Execute("update ts_userinfo set blackMenu='"&blackMenu2&"' where username='"&session("tslt_username")&"'")
                       %>
                        <script language=JavaScript>
                                      alert ("Ӻбͷ <%=aaa%> ɹ ")
                        </script>
                       <%
                end if 
        rs.close
       Set rs = Nothing
end sub

sub addBlackIP(aaa)
        sql="select blackIP from ts_userinfo where username='"&session("tslt_username")&"'"
        set rs=conn.Execute(sql)
                 if not rs.bof or rs.eof then
                           dim blackIP2
                           blackIP2 = rs("blackIP")
                           if blackIP2<>"" then
                                 dim fff
                                 fff = Split(blackIP2, "|")
                                 Dim i,BIP
                                 For i = UBound(fff) To 0 step-1
                                        BIP=fff(i)                 
                                        if BIP=aaa then
                                             Response.redirect Request.ServerVariables("HTTP_REFERER")
                                             Response.End
                                        end if
                                 next
                                 blackIP2= blackIP2 & aaa&"|"
                                 conn.Execute("update ts_userinfo set blackIP='"&blackIP2&"' where username='"&session("tslt_username")&"'")
                                 %>
                                       <script language=JavaScript>
                                                  alert (" <%=aaa%> IPɹ ")
                                       </script>
                                 <%
                           else
                                  blackIP2= "|" & aaa & "|"
                                  conn.Execute("update ts_userinfo set blackIP='"&blackIP2&"' where username='"&session("tslt_username")&"'")
                                  %>
                                        <script language=JavaScript>
                                                    alert (" <%=aaa%> IPɹ ")
                                        </script>
                                  <%
                           end if
              end if
        rs.close              
        Set rs = Nothing
end sub

sub delBlackIP(aaa)
         sql="select blackIP from ts_userinfo where username='"&session("tslt_username")&"'"
         set rs=conn.Execute(sql)
                dim blackIP2
                blackIP2=rs("blackIP")
                if instr(blackIP2,aaa)<>false then
                       blackIP2=replace(blackIP2,"|"&aaa&"|","|")
                       conn.Execute("update ts_userinfo set blackIP='"&blackIP2&"' where username='"&session("tslt_username")&"'")
                       %>
                        <script language=JavaScript>
                                      alert ("ӺIPбͷ <%=aaa%> ɹ ")
                        </script>
                       <%
                end if 
        rs.close
       Set rs = Nothing
end sub

sub autoreply(aaa,bbb) 
       aaa=HTMLEncode(aaa)     
       if bbb="on" then 
              bbb=true
       else
              bbb=false
       end if
       dim sql,rs
       sql="select * from ts_userinfo where username='"&session("tslt_username")&"'"
       set rs=server.createobject("adodb.recordset")
       rs.open sql,conn,1,3
               do while not rs.eof
                     rs("autoreplycontent")=aaa
                     rs("autoreply")=bbb
	   rs.update
                     rs.movenext
               loop
       rs.close
       Set rs = Nothing
end sub

%>
