delete.asp

大家好

<%@ LANGUAGE="VBSCRIPT" %>
<!--#include file="ADOVBS.INC"-->
<%
  id=cdbl(request("id"))
if request("adm")="" or request("pw")=""  then%>
<script LANGUAGE="VBSCRIPT">
<!--
msgbox "用户名和口令必须填写",0+64,"源江软件"
-->
</script>
<%response.end
end if
    DbPath = SERVER.MapPath("forum.mdb")
   Set conn = Server.CreateObject("ADODB.Connection")
   conn.open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DbPath
   set rs=server.createobject("adodb.recordset")
   sqltext="select * from forumadm where adm='"&request("adm")&"' and pw='"&request("pw")&"' "
    rs.open sqltext,conn,adOpenkeyset,adlockoptimistic,adcmdtext 
if rs.eof and  rs.bof  then
    response.write"您非管理员"
    rs.close
    conn.close
else
     sql="delete from forum where id=cdbl('"&request("id")&"')  "
     conn.execute sql
     rs.close
     conn.close
     response.redirect "default.asp"
end if

%>