var tmpstr=("  <div class=\"guest1\"><br>");
tmpstr=tmpstr+("    <form action=\"../user/usersave.asp\" method=\"post\" name=\"form1\" id=\"form1\"  onSubmit=\"return checkguest(this)\" target=\"ifr1\" >");
tmpstr=tmpstr+("      <textarea placeholder=\"请输入评论内容\" required name=\"content\" id=\"content\" class=\"textarea1 radius1 border1\" ></textarea>");
tmpstr=tmpstr+("      <br>");
tmpstr=tmpstr+("      <input type=\"text\" placeholder=\"昵称\" required name=\"username\" id=\"username\" class=\"input1 border1\"/>");
tmpstr=tmpstr+("      <br>");
tmpstr=tmpstr+("      <input type=\"number\" placeholder=\"验证码\" required name=\"vcode\" id=\"vcode\" class=\"input1 radius2\" maxlength=\"4\"/>");
tmpstr=tmpstr+("      <br>");
tmpstr=tmpstr+("      <br>");
tmpstr=tmpstr+("");
tmpstr=tmpstr+("<img id=\"codeimg\" src=\"../core/Code.asp?rd=98258\"  title=\"点击更换\" onClick=\"javascript:this.src='../core/Code.asp?rd='+randomString(10)+''\" border=\"0\" style=\"height:0.6rem;\">");
tmpstr=tmpstr+("");
tmpstr=tmpstr+("<br>	  ");
tmpstr=tmpstr+("      <input type=\"submit\" name=\"submit1\" id=\"submit1\" class=\"bt1 radius3\" value=\"立 即 提 交\"/>");
tmpstr=tmpstr+("<input type=\"hidden\" value=\"comment\" name=\"action\" />");
tmpstr=tmpstr+("<input type=\"hidden\" value=\"62855\" name=\"ownarticle\" />");
tmpstr=tmpstr+("<input type=\"hidden\" value=\"\" name=\"owncolumn\" />");
tmpstr=tmpstr+("<input type=\"hidden\" value=\"\" name=\"owncolumnqueue\" /></td>");
tmpstr=tmpstr+("    </form>");
tmpstr=tmpstr+("    <br>");
tmpstr=tmpstr+("  </div>");

tmpstr=tmpstr+("  <div class=\"guest2\">");
tmpstr=tmpstr+("    <table width=\"100%\">");

tmpstr=tmpstr+("      <tr>");
tmpstr=tmpstr+("        <td><p class=\"unr\"> <span class=\"usertt\"><i class=\"fa fa-comment-o\"></i> adsf</span>：&lt;script&gt;alert(\/xss\/)&lt;\/script&gt;</p>");
tmpstr=tmpstr+("          <p class=\"tm\">2020-01-13 13:50:00</p>");


tmpstr=tmpstr+("          <p class=\"anr\"> <i class=\"fa fa-user\"></i> 管理员：北京的这位网友您好，不明白您的留言评论是什么意思，请直言。</p>\");
tmpstr=tmpstr+("          <p class=\"tm\">2020-01-14 20:55:00</p></td>\");

tmpstr=tmpstr+("      </tr>");

tmpstr=tmpstr+("    </table>");
tmpstr=tmpstr+("  </div>");


function changeText(tmp){
top.document.getElementById('showcomment').innerHTML = tmp;
top.document.getElementById('showcomment').className  = "trcomment trbor2";
}
changeText(tmpstr)