sqlmng.asp

诚信商店系统源代码

<%@LANGUAGE="VBScript"%>
<!--#include file="../public/wxl_conn.asp"-->
<!--#include file="../public/PublicFunction.asp"-->
<%
response.expires = 0
Const PageSize=18
Page=CInt(request("Page"))
if Page<=0 then Page=1
wxl=request("wxl")
if wxl="OK" then
	txtSQL=trim(request("txtSQL"))
	if txtSQL="" then Back("SQL指令不能为空!")
	tmpSQL=Ucase(left(txtSQL,6))
    if tmpSQL<>"DELETE" and tmpSQL<>"INSERT" and tmpSQL<>"UPDATE" then Back("非法的SQL指令！")
	conn.execute(txtSQL)
	Back(txtSQL&"   执行成功！")
end if

HtmlHead("会员查询")
%>
<table border="1" width="550" cellpadding="3" cellspacing="0" bgcolor="#D6D3CE" bordercolordark="#FFFFFF" bordercolorlight="#808080" align="center" >
<form name=form1 action="<%=UrlFile%>" method="POST">
<tr>
	<td width=80>警告:</td>
	<td>本操作仅限高级、对SQL编程比较熟悉的用户，您可以直接输入sql执行语句
请慎重考虑您的执行语句是否正确和完整，执行后不可恢复</td>
</tr>
<td width=80>SQL指令:</td>
<td><textarea name='txtSQL' ROWS="10" COLS="50"></TEXTAREA></textarea></td>
</table>
          <table border="0" width="100%" cellspacing="0" cellpadding="0" bgcolor="#D6D3CE">
            <tr>
              <td height="6"></td>
            </tr>
            <tr>
              <td height="2" align="center">
			  <input type="submit" value="  查 询" name="B1" class="submit" style="width:60; height:25;">&nbsp;&nbsp;  
                &nbsp; <input type="reset" value="  返 回" name="B2" class="submit" style="width:60; height:25;" onClick="history.back();"></td> 
            </tr>
            <tr>
              <td height="6"></td>
            </tr>
          </table>
	<input type='hidden' name='wxl' value='OK'>
	</form>
<%
HtmlEnd
%>