<%@ Language="Jscript" %>

<!--#include file="../includes/db.asp"-->
<!--#include file="../functions/dates.asp"-->

<%
var title = String(Request.Form("title"));
var text = String(Request.Form("text"));

var sql = "insert into news (title, [text], [time]) values (";
sql += "'" + title + "', ";
sql += "'" + text.replace(/'/g, "''") + "', ";
sql += "'" + getDate() + "')";

var conn = Server.CreateObject("adodb.connection");
conn.Open(connStr);
conn.Execute(sql);

Response.Redirect("../default.asp");
%>