admin_news.asp

一个不错的企业网站

<!--#include file="inc/config.asp"-->
<!--#include file="mdb/home_mdb.asp"-->
<!--#include file="inc/format.asp"-->
<!--#include file="inc/error.asp"-->
<!--#include file="inc/adminmenu.asp"-->
<!--#include file="inc/UBBshow.asp"-->
<!--#include file="inc/UBB_news.asp"-->
<!--#include file="inc/adminnews_body.asp"-->
<title><%=webname%>-新闻管理</title>
<%
dim founderr,errmsg
founderr=false
errmsg=""

if session("adminlogin")<>sessionvar then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你尚未登录，或者超时了！请<a href='admin.asp'>重新登录</a>！"
  call diserror()
  response.end
else

if Request.form("MM_insert") then
if request.form("action")="newnews" then
sql="select * from news"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim author,ahome,keyword,title,content
author=trim(replace(request.form("news_author"),"'",""))
ahome=trim(replace(request.form("news_ahome"),"'",""))
keyword=trim(replace(request.form("news_keyword"),"'",""))
title=trim(replace(request.form("news_title"),"'",""))
content=trim(replace(request.form("news_content"),"'",""))

if author="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入作者或来源名称！"
else
  rs("news_author")=author
end if
if ahome="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入来源的地址！"
else
  rs("news_ahome")=ahome
end if
if keyword="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入该新闻的关键字！"
else
  rs("news_keyword")=keyword
end if
if title="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入新闻的标题！"
else
  rs("news_title")=title
end if
if content="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入来源的地址！"
else
  rs("news_content")=content
end if

if not founderr then
rs.update
rs.close
set rs=nothing
  sql="update allcount set newscount = newscount + 1"
  conn.execute(sql)
  closedatabase
response.redirect "admin_news.asp"
else
call diserror()
response.end
end if
end if
if request.form("action")="editnews" then
if request.Form("id")="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须指定操作的对象！"
else
  if not isInteger(request.form("id")) then
    founderr=true
    errmsg=errmsg+"<br>"+"<li>非法的新闻id参数。"
  end if
end if
if founderr then
  call diserror()
  response.End
end if
sql="select * from news where news_id="&cint(request.Form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
author=trim(replace(request.form("news_author"),"'",""))
ahome=trim(replace(request.form("news_ahome"),"'",""))
keyword=trim(replace(request.form("news_keyword"),"'",""))
title=trim(replace(request.form("news_title"),"'",""))
content=trim(replace(request.form("news_content"),"'",""))

if author="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入作者或来源名称！"
else
  rs("news_author")=author
end if
if ahome="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入来源的地址！"
else
  rs("news_ahome")=ahome
end if
if keyword="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入该新闻的关键字！"
else
  rs("news_keyword")=keyword
end if
if title="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入新闻的标题！"
else
  rs("news_title")=title
end if
if content="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须输入来源的地址！"
else
  rs("news_content")=content
end if

if not founderr then
rs.update
rs.close
set rs=nothing
response.redirect "admin_news.asp"
else
call diserror()
response.end
end if
end if
if request.form("action")="delnews" then
if request.Form("id")="" then
  founderr=true
  errmsg=errmsg+"<br>"+"<li>你必须指定操作的对象！"
else
  if not isInteger(request.form("id")) then
    founderr=true
    errmsg=errmsg+"<br>"+"<li>非法的新闻id参数。"
  end if
end if
if founderr then
  call diserror()
  response.End
end if
sql="select * from news where news_id="&cint(request.Form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.delete
rs.close
set rs=nothing
  sql="update allcount set newscount = newscount - 1"
  conn.execute(sql)
  closedatabase
response.redirect "admin_news.asp"
end if
end if

call adminnews_body()
closedatabase
end if
%>