%
if session("login") <> "true" then
response.redirect "login2.asp"
End If
%>
<%
response.expires = 0
response.buffer = true
dim db, strConnection
Set db = Server.CreateObject("ADODB.Connection")
strConnection = "driver={MySQL 3.22.32};server=localhost;uid=root;pwd=cobalt-mysql;database=css"
db.open strConnection
%>
<%
strid = Request.QueryString("id")
Dim objRS2
Dim strid
Dim strTitle
Dim strContentArea
Dim strFAQArea
Dim strContent
Dim strDate
Dim strIPaddress
Dim strUpdate
if request.form("submit") <> "" then
StrTitle = Server.HtmlEncode(Request.form("title"))
StrContentArea = Trim(Request.form("content_area"))
StrFAQArea = Trim(Request.form("faqarea"))
StrContent = Server.HtmlEncode(Request.form("content"))
StrDate = now()
StripAddress = Request.ServerVariables("SERVER_NAME")
StrTitle = Replace(StrTitle, vbCrLf,"
")
StrTitle = Replace(StrTitle, " ","  ")
StrTitle = Replace(StrTitle, "'", "''")
StrContent = Replace(StrContent, vbCrLf,"
")
StrContent = Replace(StrContent, " ","  ")
StrContent = Replace(StrContent, "'", "''")
strUpdate = "UPDATE content SET title = '"& strtitle &"',content = '"& strcontent &"',ip = '"& stripaddress &"',content_type = '"& strcontentarea &"',area = '"& strFAQarea &"' WHERE content_id = '" & strid & "';"
set objRS2 = db.Execute(strUpdate)
db.close
set objRS = nothing
set db = nothing
response.redirect("default.asp?id=3")
Else
Dim objRS,SQL2,strcontenttype
strid = Request.QueryString("id")
If strid <> "" then
SQL2 = "SELECT content_id,content_type,content,title,area FROM content WHERE content_id = "&strid&";"
set objRS = DB.Execute(SQL2)
else
response.write "error"
End if
End if
%>