<% Dim subMenu subMenu = Trim(Request("subMenu")) Dim BBS_Category BBS_Category = Trim(Request("BBS_Category")) Dim PID, LinkID, Page PID = Request("PID") LinkID = Request("LinkID") Page = Request("Page") Dim dbConn SET dbConn = GetDBConn() 'on error resume next Dim Subject, Writer, Email, Passwd, Content, BBS_NO, sqlUpdate, n Subject = Replace(Request("Subject"),"'","''") Writer = Replace(Request("Writer"),"'","''") Email = Replace(Request("Email"),"'","''") Passwd = Replace(Request("Passwd"), "'", "''") Content = Replace(Request("Content"),"'","''") BBS_NO = Replace(Request("BBS_NO"),"'","''") Subject = Replace(Subject ,"|","chr(124)_pipe") Content = Replace(Content ,"|","chr(124)_pipe") sqlUpdate = " UPDATE E_bbs SET " sqlUpdate = sqlUpdate & " BBS_Subject = '" & Subject & "'," sqlUpdate = sqlUpdate & " BBS_Editor = '" & Writer & "'," sqlUpdate = sqlUpdate & " BBS_Email = '" & Email & "'," sqlUpdate = sqlUpdate & " BBS_Text = '" & Content & "' " sqlUpdate = sqlUpdate & " WHERE BBS_Category = '"&BBS_Category&"' AND BBS_NO = " & BBS_NO sqlUpdate = sqlUpdate & " AND BBS_Passwd = '" & Passwd & "'" dbconn.Execute sqlUpdate, n Set dbconn = Nothing if n > 0 then ReFresh("/board/board_detail.asp?subMenu="&subMenu&"&BBS_Category="&BBS_Category&"&PID=" & PID & "&Page=" & Page & "&LinkID=" & LinkID) Else %> <% End if %>