📄 addjh.asp
字号:
<%@LANGUAGE="VBSCRIPT"%>
<% If Session("MM_Username") <> "admin" Then Response.Write("<script Language=Javascript>alert('你不是管理员，不能使用此模块的管理系统。');location.href = 'javascript:history.go(-1)';</script>") end if %>
<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers=""
MM_authFailedURL="../superlogin.asp"
MM_grantAccess=false
If Session("MM_Username") <> "" Then
If (true Or CStr(Session("MM_UserAuthorization"))="") Or _
(InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
MM_grantAccess = true
End If
End If
If Not MM_grantAccess Then
MM_qsChar = "?"
If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
MM_referrer = Request.ServerVariables("URL")
if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
Response.Redirect(MM_authFailedURL)
End If
%>
<!--#include file="myzb.asp" -->
<%
' *** Edit Operations: declare variables
Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd
Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId
Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i
MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME"))
If (Request.QueryString <> "") Then
MM_editAction = MM_editAction & "?" & Server.HTMLEncode(Request.QueryString)
End If
' boolean to abort record edit
MM_abortEdit = false
' query string to execute
MM_editQuery = ""
%>
<%
' *** Insert Record: set variables
If (CStr(Request("MM_insert")) = "form1") Then
MM_editConnection = MM_myzb_STRING
MM_editTable = "jh"
MM_editRedirectUrl = "jh.asp"
MM_fieldsStr = "jhbt|value|jhfl|value|jhurl|value|tj|value"
MM_columnsStr = "jhbt|',none,''|jhfl|',none,''|jhurl|',none,''|tj|none,1,0"
' create the MM_fields and MM_columns arrays
MM_fields = Split(MM_fieldsStr, "|")
MM_columns = Split(MM_columnsStr, "|")
' set the form values
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
Next
' append the query string to the redirect URL
If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
Else
MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
End If
End If
End If
%>
<%
' *** Insert Record: construct a sql insert statement and execute it
Dim MM_tableValues
Dim MM_dbValues
If (CStr(Request("MM_insert")) <> "") Then
' create the sql insert statement
MM_tableValues = ""
MM_dbValues = ""
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_formVal = MM_fields(MM_i+1)
MM_typeArray = Split(MM_columns(MM_i+1),",")
MM_delim = MM_typeArray(0)
If (MM_delim = "none") Then MM_delim = ""
MM_altVal = MM_typeArray(1)
If (MM_altVal = "none") Then MM_altVal = ""
MM_emptyVal = MM_typeArray(2)
If (MM_emptyVal = "none") Then MM_emptyVal = ""
If (MM_formVal = "") Then
MM_formVal = MM_emptyVal
Else
If (MM_altVal <> "") Then
MM_formVal = MM_altVal
ElseIf (MM_delim = "'") Then ' escape quotes
MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
Else
MM_formVal = MM_delim + MM_formVal + MM_delim
End If
End If
If (MM_i <> LBound(MM_fields)) Then
MM_tableValues = MM_tableValues & ","
MM_dbValues = MM_dbValues & ","
End If
MM_tableValues = MM_tableValues & MM_columns(MM_i)
MM_dbValues = MM_dbValues & MM_formVal
Next
MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")"
If (Not MM_abortEdit) Then
' execute the insert
Set MM_editCmd = Server.CreateObject("ADODB.Command")
MM_editCmd.ActiveConnection = MM_editConnection
MM_editCmd.CommandText = MM_editQuery
MM_editCmd.Execute
MM_editCmd.ActiveConnection.Close
If (MM_editRedirectUrl <> "") Then
Response.Redirect(MM_editRedirectUrl)
End If
End If
End If
%>
<%
Dim Recordset2
Dim Recordset2_numRows
Set Recordset2 = Server.CreateObject("ADODB.Recordset")
Recordset2.ActiveConnection = MM_myzb_STRING
Recordset2.Source = "SELECT * FROM jh"
Recordset2.CursorType = 0
Recordset2.CursorLocation = 2
Recordset2.LockType = 1
Recordset2.Open()
Recordset2_numRows = 0
%>
<HTML>
<HEAD>
<TITLE>管理中心</TITLE>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=gb2312">
<style type="text/css">
<!--
body,td,th {
font-size: 12px;
color: #000000;
}
a {
font-size: 12px;
color: #0033FF;
}
a:link {
text-decoration: none;
}
a:visited {
text-decoration: none;
color: #0033FF;
}
a:hover {
text-decoration: underline;
color: #000000;
}
a:active {
text-decoration: none;
color: #000000;
}
.style10 {color: #FF0000}
-->
</style>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_findObj(n, d) { //v4.01
var p,i,x; if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
if(!x && d.getElementById) x=d.getElementById(n); return x;
}
function MM_validateForm() { //v4.0
var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
for (i=0; i<(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
if (val) { nm=val.name; if ((val=val.value)!="") {
if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
if (p<1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
} else if (test!='R') { num = parseFloat(val);
if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
min=test.substring(8,p); max=test.substring(p+1);
if (num<min || max<num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
} } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
} if (errors) alert('The following error(s) occurred:\n'+errors);
document.MM_returnValue = (errors == '');
}
//-->
</script>
</HEAD>
<BODY BGCOLOR=#FFFFFF LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0>
<!-- ImageReady Slices (未标题-2) -->
<div align="center">
<TABLE WIDTH=773 BORDER=0 CELLPADDING=0 CELLSPACING=0>
<TR>
<TD>
<IMG SRC="images/index_01.gif" WIDTH=304 HEIGHT=100 ALT=""></TD>
<TD>
<IMG SRC="images/index_02.gif" WIDTH=26 HEIGHT=100 ALT=""></TD>
<TD>
<IMG SRC="images/index_03.gif" WIDTH=303 HEIGHT=100 ALT=""></TD>
<TD>
<IMG SRC="images/index_04.gif" WIDTH=140 HEIGHT=100 ALT=""></TD>
</TR>
</TABLE>
<table width="773" border="1">
<tr align="center" valign="bottom">
<td scope="col"><div align="center"><a href="user.asp">用户管理</a></div></td>
<td scope="col"><div align="center"><a href="sp.asp">商品管理</a></div></td>
<td scope="col"><div align="center"><a href="qa.asp">提问管理</a></div></td>
<td scope="col"><div align="center"><a href="jh.asp">精华管理</a></div></td>
<td scope="col"><div align="center"><a href="download.asp">下载管理</a></div></td>
<td scope="col"><div align="center"><a href="gb.asp">留言管理</a></div></td>
<td scope="col"><div align="center"><a href="../wz/admin" target="_blank">发布新闻</a></div></td>
<td scope="col"><div align="center">退出系统</div></td>
</tr>
</table>
<table width="773" border="0">
<tr>
<td scope="col"><div align="center"><img src="images/undo.gif" width="16" height="16"><a href="jh.asp">精华管理</a> <img src="images/undo.gif" width="16" height="16"><a href="addjh.asp">填加精华</a> <img src="images/undo.gif" width="16" height="16"><a href="jh_cx.asp">精华查询</a></div></td>
</tr>
<tr>
<form name="form1" method="POST" action="<%=MM_editAction%>">
<td height="147" scope="col"><div align="center">
<table width="423" align="center">
<tr valign="baseline">
<td width="151" height="35" align="right" nowrap><div align="right">精华标题:</div></td>
<td width="260"><input type="text" name="jhbt" value="" size="32">
</td>
</tr>
<tr valign="baseline">
<td height="37" align="right" nowrap><div align="right">精华关键字:</div></td>
<td><input type="text" name="jhfl" value="" size="32">
</td>
</tr>
<tr valign="baseline">
<td height="28" align="right" nowrap><div align="right">精华URL:</div></td>
<td><input type="text" name="jhurl" value="" size="32">
</td>
</tr>
<tr valign="baseline">
<td height="31" align="right" nowrap><div align="right">推荐:</div></td>
<td><input name="tj" type="checkbox" value=true >
</td>
</tr>
<tr valign="baseline">
<td height="43" align="right" nowrap> </td>
<td><input type="submit" onClick="MM_validateForm('jhbt','','R','jhfl','','R','jhurl','','R');return document.MM_returnValue" value="插入记录">
</td>
</tr>
</table>
</div></td>
<input type="hidden" name="MM_insert" value="form1">
</form>
</tr>
<tr>
<td><div align="center">
<%
Dim Recordset1
Dim Recordset1_numRows
Set Recordset1 = Server.CreateObject("ADODB.Recordset")
Recordset1.ActiveConnection = MM_myzb_STRING
Recordset1.Source = "select * from usero where dengluming='"&Session("MM_Username")&"'and mb='1'"
Recordset1.CursorType = 0
Recordset1.CursorLocation = 2
Recordset1.LockType = 3
Recordset1.Open()
Recordset1_numRows = 0
if Recordset1.eof then
response.Write("<a href="&"http://www.bdqilu.net target="&"_blank"&""&">"&"淄博日丰电脑商行制作"&"</a>")
else
while not Recordset1.eof
response.write("<script Language=Javascript>alert('你是普通用户，不能使用此系统。');location.href = 'javascript:history.go(-1)';</script>")
Recordset1.movenext
wend
end if
%>
</div></td>
</tr>
</table>
<p> </p>
<!-- End ImageReady Slices -->
</div>
</BODY>
</HTML>
<%
Recordset2.Close()
Set Recordset2 = Nothing
%>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -