<!--#include file="inc/conn.asp"-->
<!--#include file="inc/safe.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="inc/const.asp"-->
<%
if MemberName="" then
  response.Redirect("userlogin.asp")
  response.end
end if

dim clubid
clubid=request.Form("clubid")
content=trim(iHTMLEncode(request.Form("content")))

if len(content)>200 then
  response.Write "<script language='javascript'>alert('错误，字数超过200字！');history.back(-1)</script>"
  response.end
end if

ChkNumber(clubid)

if chkhz(clubid,userid)=false then
  response.Write "<script language='javascript'>alert('您没有权力进行此操作！');history.back(-1)</script>"
  response.end
end if

set rs=server.CreateObject("adodb.recordset")
sql="select xuanyan from julebu where bigid="& clubid
rs.open sql,conn,1,3
rs("xuanyan")=content
rs.update
rs.close
set rs=nothing
conn.close
set conn=nothing
response.Redirect "club_xuanyan.asp?clubid="& clubid
%>