Dannahe's Guest Book

<% Dim conn Dim rsEntries Dim strSql Dim dtPhoto Dim strDate Dim cmd Dim strMessage Dim strGuest Dim strColor Set conn = Server.CreateObject("ADODB.Connection") Set rsEntries = Server.CreateObject("ADODB.Recordset") conn.Open "Driver={Mysql}; Server=localhost; Database=stevekuntz_com; UID=skuntz; PWD=doctor24" If Request.Querystring("message") = "yes" Then Set cmd = Server.CreateObject("ADODB.Command") strGuest = Request.Form("guest") strGuest = Replace(strGuest, "'", "''") strGuest = Replace(strGuest, """", """""") strDate = Month(Now) & "/" & Day(Now) & "/" & Year(Now) strMessage = Request.Form("message") strMessage = Replace(strMessage, "'", "''") strMessage = Replace(strMessage, """", """""") If Instr(1, strMessage, "http") > 0 Then Elseif Instr(1, strMessage, "url") > 0 Then Elseif Left(strGuest, 2) = "hh" Then Elseif strGuest = "" Then Elseif Left(strGuest, 2) = "Un" Then Else strSql = "Insert into guestbook (guestname, guestdate, message) Values ('" & strGuest & "', '" & strDate & "', '" & strMessage & "')" cmd.CommandText = strSql cmd.ActiveConnection = conn cmd.Execute End If End If strSql = "Select * From guestbook order by messagenum desc" rsEntries.Open strSql, conn, adOpenForwardOnly, 1 Do While rsEntries.EOF <> True Response.Write "" rsEntries.Movenext Loop rsEntries.Close conn.Close %>

" Response.Write "" Response.Write "" Response.Write "" Response.Write "" Response.Write "

" Response.Write "Guest name: " & rsEntries("guestname") & "	" Response.Write "Date: " & rsEntries("guestdate") & "
" Response.Write "" Response.Write rsEntries("message") & "