protected void Page_Load(Object src,EventArgs e)

  {

    string sql;

    OleDbCommand comm;

    Conn theconn=new Conn();

    if(Request.Form["post"]=="add")

     {

      IsMember=Request.Form["ismember"];

      if(IsMember=="0")

       {

         Md5 JM=new Md5();

         if(Session["YZM"]==null)

          {

            Response.Write("yzm error");

            Response.End();

          }

         else if(Request.Form["code"]!=Session["YZM"].ToString())

          {

           Response.Write("yzm error");

           Response.End();

         }

       }

       Table=Request.Form["table"];//获取参数

 DetailId=Request.Form["id"];

       string UserName=Request.Form["username"];

       string Password=Request.Form["code"];

       string Quote=Request.Form["quote"];

       string Content=Request.Form["content"];

       string Checked=Request.Form["checked"];

       Checked=Checked=="0"?"1":"0";

       string SiteId=Request.Form["siteid"];

       LoginUserName="";

       IP=GetClientIP();

       if(Content=="" || !IsNum(Checked) || !IsNum(DetailId) || !IsNum(SiteId) || !IsNum(IsMember))

        {

          Response.Write("input error");

          Response.End();

        }

       else

        {

         Check_Post();

         conn=new OleDbConnection(theconn.Constr());

         conn.Open();



        //处理内容

        Get_Set(int.Parse(SiteId));

        Check_TimeLimit();   //检查时间间隔;

        if(Comment_MaxLength!=0 && Content.Length>Comment_MaxLength)//检查最大字符

         {

          conn.Close();

          Response.Write("maxleng_limit,"+Comment_MaxLength);

          Response.End();

         }

         Check_Forbid(Content);           //检查禁止关键字

         Content=Replace_String(Content);    //替换

         UserName=Replace_String(UserName);  //替换

         //处理内容

         if(IsMember=="1")//检查用户，，只有是1才检测，这就跳过检测了

          {

            if(Request.Cookies["Member"]!=null)

             {

              Member_Valicate MCheck=new Member_Valicate();

              MCheck.Member_Check();

              UserName=MCheck._UserName;

             }

            else

             {

              Check_Member(UserName,Password); //检查用户名和密码

             }

          }

         sql="insert into pa_comments(site_id,thetable,[detail_id],[username],[content],[quote],[checked],[ip],thedate,[ismember]) values("+int.Parse(SiteId)+",'"+Sql_Format(Table)+"',"+int.Parse(DetailId)+",'"+Sql_Format(UserName)+"','"+Sql_Format(Content)+"','"+Sql_Format(Quote)+"',"+int.Parse(Checked)+",'"+IP+"','"+DateTime.Now+"',"+int.Parse(IsMember)+")";

         comm=new OleDbCommand(sql,conn);

         comm.ExecuteNonQuery();

         sql="update "+Table+" set comments=comments+1 where id="+DetailId;//table存在注入

         comm=new OleDbCommand(sql,conn);

         comm.ExecuteNonQuery();

         Response.Write(Checked);

         conn.Close();

         Response.End();

        }