<!--#include file="conn.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="../fuction.asp"-->
<%  username=nosql(session("username"))
password=nosql(session("userpassword"))
manbid=(session("manbid"))
bid=nosql(request("bid"))
if session("username")=empty then
response.redirect "../login.asp"
end if
    if manbid=bid or manbid=20000 then
    title=nosql(trim(Request.Form("title1")))
	 body=nosql(trim(Request.Form("body1")))
    
conn.execute("insert into smallpaper (title,username,body,riqi,bid) values('"&title&"','"&username&"','"&body&"','"&now()&"','"&bid&"')")
response.redirect "list.asp?bid="&bid
else
response.write"<script language='javascript'>alert('你没权限！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end 
end if 

%>

