add.asp

asp

<%response.expires=0%>
<!--#include file="../inc/conn.asp"-->
<%
userid=Session("userid")
userlevel=Session("userlevel")
if userid="" or userlevel="" then
  call msgbox("请重新登陆！",3)
end if
if not isnumeric(userid) or not isnumeric(userlevel) then
  call msgbox("请重新登陆！",3)
end if
userlevel=CCur(userlevel)
if not userlevel=1 then
  call msgbox("管理员级别够！",1)
end if

username=strFilter(request.form("username"),20)
userpass=strFilter(request.form("userpass"),20)
userlevel=strFilter(request.form("userlevel"),1)
if not isnumeric(userlevel) then
  call msgbox("新用户级别不正确！",1)
end if

if username="" or userpass="" or userlevel="" then
  call msgbox("请重新填加用户！",1)
end if

rs.open "insert into admin(username,userpass,userlevel) values('"&username&"','"&userpass&"',"&userlevel&")",conn,1,3

call msgbox("管理员 "&username&" 添加成功！","../admin/default.asp")
%>