" & vbcrlf
%>
<%
Dim GAGB_action, GAGB_saved, GAGB_RComment
If Request.Querystring.Count = 1 then
If not isNumeric(Request.Querystring.Item(1)) Then Call GAGB_noAccess("arg")
GAGB_ID = CLng(Request.Querystring.Item(1))
GAGB_strSQL = "SELECT " & GAGB_strtbl & "Record.* FROM " & GAGB_strtbl & "Record WHERE ID = " & GAGB_ID & ";"
Set GAGB_rs = GAGB_objConn.Execute(GAGB_strSQL)
If Not GAGB_rs.EOF Then
GAGB_ID = GAGB_rs(0)
GAGB_pdate = GAGB_rs(1)
GAGB_Name = GAGB_rs(2)
GAGB_Email = GAGB_rs(3)
GAGB_Url = GAGB_rs(4)
GAGB_RComment = GAGB_rs(5)
GAGB_Comment = GAGB_InsertSmiley(GAGB_RComment)
GAGB_Comment = GAGB_EncodeURL(GAGB_Comment)
GAGB_Custom1 = GAGB_convertNull(GAGB_rs(7))
GAGB_Custom2 = GAGB_convertNull(GAGB_rs(8))
GAGB_Custom3 = GAGB_convertNull(GAGB_rs(13))
GAGB_Custom4 = GAGB_convertNull(GAGB_rs(14))
GAGB_Topic = GAGB_convertNull(GAGB_rs(12))
Else: Call GAGB_noAccess("noID")
End If
GAGB_rs.close
If request.form("flag") = 1 then
GAGB_Reply = Request.Form("fComment")
GAGB_Reply = Replace(GAGB_Reply, "
", vbCrlf)
GAGB_Reply = Replace(GAGB_Reply, vbCrlf, "
")
GAGB_RComment = GAGB_RComment & " :hr: " & GAGB_AdminName & " " & GAGB_Lingial(3, 61) & " " & Now & ":
" & GAGB_Reply & "
"
GAGB_objConn.Execute("UPDATE " & GAGB_strtbl & "Record SET comment = '" & GAGB_sq(GAGB_RComment) & "' WHERE ID = " & GAGB_ID & ";")
GAGB_Close_Connection
Response.Redirect "admin_reply.asp?ID=" & GAGB_ID
End If
Else: Call GAGB_noAccess("arg")
End If
%>
<%
Sub GAGB_noAccess(GAGB_iEvent)
Select Case GAGB_iEvent
Case "arg"
GAGB_msg = "Record ID was not provided!"
Case "noID"
GAGB_msg = "Record cannot be found in a database!"
End Select
Response.Write "" & GAGB_msg & "
"
GAGB_Close_Connection
Response.End
End Sub
%>