function check()
{
if(document.form1.content.value=="" || (!check_err(document.form1.content.value)))
{
alert("留言内容不能为空，且不能包含非法字符");
return false;
}
}
function check_err(char) {
if ((!(char.indexOf ('script') == -1)) || (!(char.indexOf ('
return false;
return true;
}
response.buffer=true
dim aucid
aucid=rst("auc_id")
Ownerid=rst("Ownerid")
call chk(aucid,"id")
call chk(ownerid,"id")
if isnumeric(aucid)=false then
response.write"alert('警告！留言操作出错了！');"
response.write"this.location.href='index.asp';"
response.end
else
sql="select regid from users where regusername='"&session("user")&"'"
set rs=conn.execute(sql)
if rs.eof then
response.write"alert('出错了，你还没有登陆或者已经超时！');"
response.write"this.location.href='login.asp';"
response.end
end if
%>
留言内容：
