% Option Explicit
Response.Buffer = true
Response.CacheControl = "Public"
response.ContentType="text/html"
response.Charset="big5"
dim frmQ1, frmQ2, frmQ3, frmPlayer, frmTel, frmEmail
frmQ1 = trim(Request.Form("Q1"))
frmQ2 = trim(Request.Form("Q2"))
frmQ3 = trim(Request.Form("Q3"))
frmPlayer = trim(Request.Form("player"))
frmTel = trim(Request.Form("tel"))
frmEmail = trim(Request.Form("email"))
if frmQ1 <> "" AND frmQ2 <> "" AND frmQ3 <> "" AND frmPlayer <> "" AND frmTel <> "" AND frmEmail <> "" then
dim playerIP, playerSessionID, status
dim sql, rs, Conn
status = false
playerIP = Request.ServerVariables("REMOTE_ADDR")
playerSessionID = Session.SessionID
%>
<%
sql="SELECT PlayerTel FROM Quiz WHERE PlayerTel = "&frmTel
set Conn = DBConn()
'response.write sql&"
"
set rs = Conn.Execute(sql)
if not rs.eof then
status = false
response.write ""&chr(10)
else
status = true
end if
rs.close
set rs = Nothing
sql="SELECT PlayerIP, PlayerSessionID, CreateDate FROM Quiz WHERE PlayerIP = '"&playerIP&"' OR PlayerSessionID = '"&playerSessionID&"'"
'response.write sql&"
"
set rs = Conn.Execute(sql)
if not rs.eof then
status = false
if DateDiff("d", rs("CreateDate"), now()) < 1 then
response.write ""&chr(10)
else
status = true
end if
end if
rs.close
set rs = Nothing
if status = true then
sql = "INSERT INTO Quiz (Q1, Q2,Q3, PlayerName, PlayerTel, PlayerEmail, PlayerIP, PlayerSessionID) VALUES ('"&frmQ1&"', '"&frmQ2&"', '"&frmQ3&"', '"&frmPlayer&"', "&frmTel&", '"&frmEmail&"', '"&playerIP&"', '"&playerSessionID&"')"
'response.write sql&"
"
set rs = Conn.Execute(sql)
set rs = Nothing
response.write ""&chr(10)
end if
Call CloseDB(Conn)
end if
'response.write ""&Server.MapPath(".")& "\db_msib2\promo_msib2.mdb"
%>