admin_user.asp

AspEase Auction System Ver2.0/动易拍卖系统 Ver2.0

<!--#include file="conn.asp" -->
<!-- #include file="inc/info.asp" -->
<!-- #include file="inc/const.asp" -->
<%admheader
'=========================================================
'Copyright (C) 2003-2004 AspEase.Com. All rights reserved.
'Web: http://www.aspease.com
'Email: [e-mail],[e-mail]
'=========================================================
'
'FileName: admin_user.asp
'Version:2.0
'UpdateTime: 2004-10-7 16:15:11
'Script Written by www.aspease.com 
'=========================================================
action=rst("action")
select case action
case "add"
	call add
case "save"
	call save
case "del"
	call del
case "deluser"
	call deluser
case "refresh"
	call refresh
case "showuser"
	call showuser
case "searchuser"
	call searchuser
case "edituser"
	call edituser
case else
	call manage
end select
admfooter
sub manage
response.Write("<table width=""95%"" border=""0"" cellspacing=""1"" cellpadding=""3""  class=""tableBorder"" align=""center"">")
response.Write("  <tr> ")
response.Write("    <th colspan=4>用户级别设定</th>")
response.Write("  </tr>")
response.Write("  <tr align=center> ")
response.Write("    <th class=""row"" height=""25"">等级序号(1,2,3,...)</th>")
response.Write("    <th class=""row"">级别名称</th>")
response.Write("    <th class=""row"">需要好评数(达到该级别需要的信用数)</th>")
response.Write("    <th class=""row"">操作</th>")
response.Write("  </tr>")
response.Write("  <form name=f1 action=""?action=save"" method=post>")
response.Write("    ")
set rs=conn.execute("select * from grade order by grade_id")
do while not rs.eof
response.Write(" ")
response.Write("    <tr align=""center""> ")
response.Write("      <td class=""row""> ")
response.Write("        <input type=""text"" name=""grade_value"" value=""")
response.Write(rs("grade_value"))
response.Write(""">")
response.Write("      </td>")
response.Write("      <td class=""row""> ")
response.Write("        <input type=""text"" name=""grade_name"" value=""")
response.Write(rs("grade_name"))
response.Write(""">")
response.Write("        <input type=""hidden"" name=""grade_id"" value=""")
response.Write(rs("grade_id"))
response.Write(""">")
response.Write("      </td>")
response.Write("      <td class=""row""> ")
response.Write("        <input type=""text"" name=""grade_credit"" value=""")
response.Write(rs("grade_credit"))
response.Write(""">")
response.Write("      </td>")
response.Write("      <td class=""row"">&nbsp;<a href=""?action=del&grade_id=")
response.Write(rs("grade_id"))
response.Write(""" onclick=""{if(confirm('确实要删除吗?')){return true;}return false;}"">删除</a></td>")
response.Write("    </tr>")
response.Write("    ")
rs.movenext
loop
rs.close
response.Write(" ")
response.Write("    <tr>")
response.Write("      <td colspan=4 class=""row"">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;")
response.Write("        <input type=submit name=submit value=""修改"">")
response.Write("      </td>")
response.Write("    </tr>")
response.Write("  </form>")
response.Write("  <script language=""javascript"">")
response.Write(chr(10))
response.Write("	function chkNull()")
response.Write(chr(10))
response.Write("	{")
response.Write(chr(10))
response.Write("		var doc;")
response.Write(chr(10))
response.Write("		doc = document.addgrade;")
response.Write(chr(10))
response.Write("		if (doc.grade_value.value=="""")")
response.Write(chr(10))
response.Write("		{")
response.Write(chr(10))
response.Write("			alert(""级别序号不能为空!"");			")
response.Write(chr(10))
response.Write("			doc.grade_value.focus();")
response.Write(chr(10))
response.Write("			return false;")
response.Write(chr(10))
response.Write("		}")
response.Write(chr(10))
response.Write("		if (doc.grade_name.value=="""")")
response.Write(chr(10))
response.Write("		{")
response.Write(chr(10))
response.Write("			alert(""级别名称不能为空!"");			")
response.Write(chr(10))
response.Write("			doc.grade_name.focus();")
response.Write(chr(10))
response.Write("			return false;")
response.Write(chr(10))
response.Write("		}")
response.Write(chr(10))
response.Write("		if (doc.grade_credit.value=="""")")
response.Write(chr(10))
response.Write("		{")
response.Write(chr(10))
response.Write("			alert(""级别需要的好评数不能为空!"");			")
response.Write(chr(10))
response.Write("			doc.grade_credit.focus();")
response.Write(chr(10))
response.Write("			return false;")
response.Write(chr(10))
response.Write("		}")
response.Write(chr(10))
response.Write("	}	")
response.Write(chr(10))
response.Write("</script>")
response.Write("  <form name=addgrade action=""?action=add"" method=post onsubmit=""return chkNull()"">")
response.Write("    <tr align=""center""> ")
response.Write("      <td class=""row""> ")
response.Write("        <input type=""text"" name=""grade_value"" value="""">")
response.Write("      </td>")
response.Write("      <td class=""row""> ")
response.Write("        <input type=""text"" name=""grade_name"" value="""">")
response.Write("      </td>")
response.Write("      <td class=""row""> ")
response.Write("        <input type=""text"" name=""grade_credit"" value="""">")
response.Write("      </td>")
response.Write("      <td class=""row"">&nbsp;&nbsp;&nbsp;&nbsp; ")
response.Write("        <input type=submit name=submit value=添加>")
response.Write("      </td>")
response.Write("    </tr>")
response.Write("  </form>")
response.Write("</table>")
end sub
sub save
Server.ScriptTimeout=99999999
	for i=1 to request.form("grade_id").count
	easegradefarid=replace(request.form("grade_id")(i),"'","")
	easegradeid=replace(request.form("grade_value")(i),"'","")
	easegradename=replace(request.form("grade_name")(i),"'","")
	easeneedcredit=replace(request.form("grade_credit")(i),"'","")		
	if trim(easegradefarid)="" or isnumeric(easegradefarid)=false or trim(easegradeid)="" or (not isnumeric(easegradeid)) or trim(easegradename)="" or trim(easeneedcredit)="" then
		response.write "<script language=javascript>{alert( '请填写完整再添加');location.href='admin_user.asp';}</script>"
		response.end	
	else
		conn.execute("update grade set grade_value="&sqlval(easegradeid)&",grade_name="&sqlstr(easegradename)&",grade_credit="&sqlstr(easeneedcredit)&" where grade_id="&sqlval(easegradefarid))
	end if
	next
	response.write "设置成功，请返回。"	
end sub
sub add
easegradeid=rst("grade_value")
easegradename=rst("grade_name")
easeneedcredit=rst("grade_credit")
if trim(easegradeid)="" or not isnumeric(easegradeid) or trim(easegradename)="" or trim(easeneedcredit)="" then
	response.write "<script language=javascript>{alert( '请填写完整再添加');location.href='admin_user.asp';}</script>"
else
	set rsck=conn.execute("select grade_value from grade where grade_value="&sqlval(easegradeid))
	if rsck.eof then
		conn.execute("insert into grade(grade_value,grade_name,grade_credit) values("&sqlval(easegradeid)&","&sqlstr(easegradename)&","&sqlstr(easeneedcredit)&")")
		response.write "添加成功"
	else
		response.write "请不要指定相同的序号"
	end if
rsck.close
end if
end sub

sub del
conn.execute("delete from grade where grade_id="&sqlval(rst("grade_id")))
response.write "删除成功"
end sub

sub deluser
set rs=conn.execute("select auc_id from auctions where auc_ItemOwner="&sqlval(rst("userid"))&"")
dim auc_ids
auc_ids=""
do while not rs.eof
	auc_ids=auc_ids&rs(0)
rs.movenext
if not rs.eof then
	auc_ids=auc_ids&","
end if
loop
auc_ids=split(auc_ids,",")
for i=0 to ubound(auc_ids)
	conn.execute("delete from bids where bidItemID in ("&sqlval(auc_ids(i))&")")
	conn.execute("delete from careauc where careitemid in ("&sqlval(auc_ids(i))&")")
	conn.execute("delete from gets where get_ItemID in ("&sqlval(auc_ids(i))&")")
	conn.execute("delete from msg where msg_aucid in ("&sqlval(auc_ids(i))&")")
	conn.execute("delete from pingjia where pj_aucid in ("&sqlval(auc_ids(i))&")")
	conn.execute("delete from tuijian where tj_aucid in ("&sqlval(auc_ids(i))&")")
	conn.execute("delete from upshelf where up_aucid in ("&sqlval(auc_ids(i))&")")
next

conn.execute("delete from auctions where auc_itemowner="&sqlval(rst("userid"))) 'del all items
conn.execute("delete from users where regid="&sqlval(rst("userid")))
conn.execute("delete from bids where bidsellerid="&sqlval(rst("userid"))&" or bidbidderid="&sqlval(rst("userid")))
conn.execute("delete from careauc where careownerid="&sqlval(rst("userid")))
conn.execute("delete from gets where get_BuyerID="&sqlval(rst("userid"))&" or get_sellerid="&sqlval(rst("userid")))
conn.execute("delete from careshop where careownerid="&sqlval(rst("userid")))
conn.execute("delete from msg where msg_fromid="&sqlval(rst("userid"))& " or msg_toid="&sqlval(rst("userid")))
conn.execute("delete from pingjia where pj_fromid="&sqlval(rst("userid"))& " or pj_toid="&sqlval(rst("userid")))
set rs1=conn.execute("select shopid from shops where shopownerid="&sqlval(rst("userid")))
if not rs1.eof then
	conn.execute("delete from careshop where careshopid="&rs1(0))
end if
conn.execute("delete from shops where shopownerid="&sqlval(rst("userid")))
conn.execute("delete from shopshelf where shopshelf_owner="&sqlval(rst("userid")))
conn.execute("delete from tuijian where tj_shopownerid="&sqlval(rst("userid")))
conn.execute("delete from upshelf where up_shelfowner="&sqlval(rst("userid")))
response.write "彻底删除成功"
end sub

sub showuser
sql="select * from users order by regid desc" 
set rs=server.CreateObject("adodb.recordset")
rs.open sql,conn,1,1
totalcs=rs.recordcount
response.Write("<table width=""95%""  border=""0"" cellspacing=""1"" cellpadding=""3"" class=""tableBorder"" align=""center"">")
response.Write("  <form name=""form2"" method=""post"" action=""?action=searchuser"">")
response.Write("    <tr>")
response.Write("      <th height=""25"" colspan=""3"">")
response.Write("<div align=""center"">用户级别管理</div></th>")
response.Write("    </tr>")
response.Write("    <tr> ")
response.Write("      <td colspan=""3"" class=""Row"">查找用户名： ")
response.Write("        <input name=""username"" type=""text"" id=""username""> <input type=""submit"" name=""Submit"" value=""查找""> ")
response.Write("        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>")
response.Write("    </tr>")
response.Write("  </form>")
response.Write("	<tr> ")
response.Write("    <th width=""24%"" class=""Row"" height=""25"">用户</th>")
response.Write("    <th width=""34%"" class=""Row"">信用度</th>")
response.Write("    <th width=""42%"" class=""Row""> 会员级别 </th>")
response.Write("  </tr>")
response.Write("  ")
 If rs.eof Then 
response.Write("  <tr> ")
response.Write("    <td class=""Row"">还没有用户</td>")
response.Write("    <td class=""Row"">&nbsp;</td>")
response.Write("    <td class=""Row"">&nbsp;</td>")
response.Write("  </tr>")
 Else
auction_page=15
%><!--#include file="inc/libt.inc"--><%
response.Write(" <tr> ")
response.Write("    <td class=""Row""><a href=""usercredit.asp?userid=")
response.Write( fval(rs("regid")) )
response.Write(""" target=""_blank"">")
response.Write( rs("regusername") )
response.Write("</a></td>")
response.Write("    <td class=""Row"">")
response.Write( fval(rs("regcredit")) )
response.Write("</td>")
response.Write("    <td class=""Row"">")
response.Write( fval(rs("reggrade")) )
response.Write("&nbsp;&nbsp;&nbsp;<a href=""?action=edituser&userid=")
response.Write( fval(rs("regid")) )
response.Write(""">修改</a> ")
response.Write("      &nbsp;&nbsp;<a href=""?action=deluser&userid=")
response.Write( fval(rs("regid")) )
response.Write(""" onclick=""{if(confirm('确定删除吗\n删除用户后，该用户的商品,评价,留言等数据将全部删除')){return true;}return false;}"">删除</a> </td>")
response.Write("  </tr>")
%><!--#include file="inc/libf.inc"--><%
end if  
postpage="admin_user.asp"
ptype="showuser"
response.Write("</table>")
response.Write("<TABLE cellSpacing=0 cellPadding=0 width=""95%"" border=0 class=border1b align=""center"">")
response.Write("  <form name=""form1"" method=""post"" action=""")
response.Write(postpage&"?action="&ptype)
response.Write(""">")
response.Write("<TR> ")
response.Write("<TD align=middle width=""35%"" height=25> 共[<font color=""#FF6666"">")
response.Write(totalcs)
response.Write("</font>]条记录　分[<font color=""#FF6666"">")
response.Write(totalpages)
response.Write("</font>]页显示</TD>")
response.Write("      <TD width=""40%"" align=middle><IMG height=11 src=""images/lt.gif"" width=11 align=absMiddle> ")
if ptype<>"" then 
		ptype= "action=" & ptype & "&"
else
		ptype= ""
end if
if CurrentPage<2 then
response.write "<font color='999966'>首页 上一页</font> "
else
response.write "<a href=" & postpage & "?" & ptype & "page=1>首页</a> "
response.write "<a href=" & postpage & "?" & ptype & "page=" & CurrentPage-1 & ">上一页</a>  "
end if
if totalpages-currentpage<1 then
response.write "<font color='999966'>下一页 尾页</font>"
else
response.write "<a href=" & postpage & "?" & ptype & "page=" & CurrentPage+1 & ">下一页</a> "
response.write "<a href=" & postpage & "?" & ptype & "page=" & totalpages & ">尾页</a>"
end if
response.Write(" <IMG height=11 src=""images/gt.gif"" width=11 align=absMiddle></TD>")
response.Write("<TD align=middle width=""25%"">")
response.Write("<input type=text name=""page"" size=10>")
response.Write("<input type=""submit"" name=""Submit"" value=""转向"" class=""button""> </TD>")
response.Write("</TR>")
response.Write("</form>  ")
response.Write("</TABLE>")
end sub

sub edituser
regID=rst("userid")
if request("submit")="提交" then
Set cmd = Server.CreateObject("ADODB.Command")
set rs=server.createobject("adodb.recordset")
cmd.CommandText = "SELECT * FROM users where regID = "&regID
cmd.CommandType = 1
Set cmd.ActiveConnection = conn
rs.Open cmd, , 1, 3
if err.Number<>0 then
err.clear
response.write " <br>数 据 库 操 作 失 败 ! "
else
rs("regAdmin") = sqltstr(request("regAdmin"))
rs("regValidated") = sqltstr(request("regValidated"))
rs("regUsername") = request("regUsername")
rs("regPassword") = request("regPassword")
rs("regName") = sqltstr(request("regName"))
rs("regEmail") = request("regEmail")
rs("regAddress1") = sqltstr(request("regAddress1"))