<!--#include file="../conn/conn.asp"-->
<!--#include file="../inc/Commoncode.asp"-->
<!--#include file="../inc/md5.asp"-->
<%if ChkPost=False then
Response.Write ("<script language=JavaScript>{alert('请勿非法提交数据！');window.close();}</script>")
Response.End
end if
anonymous=Replace_Text(request.form("anonymous"))
if anonymous="" then
	pjrname=Replace_Text(request.form("pjrname"))
	pjrpass=MD5(Replace_Text(request.form("pjrpass")),32)
	'验证用户信息
	set rs=server.createobject("ADODB.Recordset")
	sql="select * from job_Member where Member_login='"&pjrname&"' and Member_pwd='"&pjrpass&"'"
	rs.open sql,conn,1,1
	if rs.eof then
		Response.Write ("<script language=JavaScript>{alert('用户名密码错误，请重新输入！');window.close();}</script>")
		Response.End
	end if
	rs.close
	set rs=nothing
else
pjrname="匿名网友"
end if
pj_content=CheckStrbox(request.form("pj_content"))
'if IsAdsContent(pj_content)=True then
'pass=2
'else
'pass=1
'end if
newsid=request.form("newsid")
pjrIP=Request.ServerVariables("HTTP_X_FORWARDED_FOR")
If pjrIP="" Then pjrIP=Request.ServerVariables("REMOTE_ADDR")

set rs=server.createobject("adodb.recordset")
'sql="select * from JOB_hrnewscom where pjrname='"&pjrname&"' and newsid="&newsid&" and pj_content='"&pj_content&"' and pjrIP='"&pjrIP&"'" 
sql="select * from JOB_hrnewscom" 
rs.open sql,conn,1,3
'if not rs.eof then
'response.write"<SCRIPT language=JavaScript>alert('对不起，您已经提交过此信息！');window.close()<//script>"
'response.end 
'else
rs.addnew
rs("pjrname")=pjrname
rs("pj_content")=pj_content
rs("newsid")=newsid
if CommentCheck=1 then
rs("pass")=0
else
rs("pass")=1
end if
rs("dateandtime")=now()
rs("pjrIP")=pjrIP
rs.update
rs.close
set rs=nothing
Call CloseConn()
'end if
if CommentCheck=1 then
response.write"<SCRIPT language=JavaScript>alert('您的评论内容已经提交成功！\n管理员审核后在相关页中显示！');window.opener.location.reload();window.close()</script>"
else
response.write"<SCRIPT language=JavaScript>alert('您的评论内容已经提交成功！');window.opener.location.reload();window.close()</script>"
end if
response.end 
%>