admin_user.asp

网页酷吧全站系统在此之前提供了一个新闻系统V1.0,反应十分热烈,并有不少网友提供了不少意见例如在线编辑器等问题,并强烈要求本部提供全部程序,顺应广大网友的强烈要求,并希望本人的QQ能够闲下来(因为实

<%if session("username")="" or session("userkey")="" then
response.redirect "../../"
end if%>
<!--#include file="mozeenconn.asp"-->
<!--#include file="md5.asp"-->
<link href=../css/main.css rel=stylesheet>
<!--#include file="./inc/const.asp"-->
<%if session("userkey")=4 then%>
<%call main()%>

<%else%>
<script language=javascript>  
alert( "错误：您无权进行用户管理！"  );
location.href = "javascript:history.back()"  
</script>
<%end if%>




<%sub main()%>
<table width="95%" border="0" align="center" cellpadding="5" cellspacing="1" bgcolor="#999999">
  <tr> 
    <td height="20" bgcolor="#eeeeee">当前位置：<a href=main.asp>管理首页</a> >> <a href=admin_user.asp>用户管理</a></td>
  </tr>
</table>
<%
if Request("action") = "adduser" then
	call adduser()
elseif request("action") = "saveuser" then
	call saveuser()
elseif request("action") = "deluser" then
	call deluser()
elseif request("action") = "editpop" then
	call editpop()
elseif request("action") = "saveeditpop" then
	call saveeditpop()
else
	call userlist()
end if
%>
<%end sub%>


<%sub userlist()%>
<table width="95%" cellspacing="1" cellpadding="5" bgcolor=#999999 align=center>
  <tr bgcolor=#cccccc><td colspan=8><center><b>所有管理用户列表</b></td></tr>
  <tr bgcolor=#ffffff><td colspan=8 height=20>【<a href=admin_user.asp?action=adduser><font color=#cc0000>添加管理用户</font></a>】</td></tr>
  <tr bgcolor=#dddddd align=center><td><b>用户名</td><td><b>EMAIL</td><td><b>OICQ</td><td><b>联系电话</td><td><b>注册日期</td><td><b>管理等级</td><td><b>发表文章</td><td><b>管理操作</td></tr>
<%
dim pagecount,page,Spage,Epage,recordcount,i
page = request.querystring("page")
if page = "" or IsNull(page) then page = 1
if not IsNumeric(page) then page = 1
page = Cint(page)
Set RS = Server.CreateObject("ADODB.RecordSet")
sql = "select * from users order by userid DESC"
RS.Open sql, Conn, 1, 1
recordcount = RS.RecordCount
RS.PageSize = PAGESIZE
pagecount = RS.PageCount
if page < 1 then
    page = 1
elseif page > pagecount then
    page = pagecount
end if
if RS.EOF  then
    Response.Write("<tr bgcolor=#ffffff><td colspan=7 height=20><center><br><font color=red>目前还没有管理用户</font></td></tr>")
else
  if recordcount > 0 then RS.AbsolutePage = page
  for i = 1 to PAGESIZE
  if RS.EOF then exit for
%>
   <tr align=center bgcolor=#eeeeee>
   <td><a href=userinfo.asp?username=<%=rs("username")%> ><font color=#0033cc><%=rs("username")%></font></a></td>
   <td><a href=mailto:<%=rs("U_email")%>><%=rs("U_email")%></a></td>
   <td><%=rs("U_oicq")%></td>
   <td><%=rs("U_tel")%></td>
   <td><%=rs("Addtime")%></td>
   <td><%if rs("userkey")=1 then%>录入员<%elseif rs("userkey")=2 then%>斑竹<%elseif rs("userkey")=3 then%>管理员<%elseif rs("userkey")=4 then%>超级管理员<%end if%></td>
   <td><%=rs("ArticleNum")%>篇</td>
   <td>【<a href=userinfo.asp?action=useredit&username=<%=rs("username")%>><font color=#cc0000>修改</font></a>】【<a href=admin_user.asp?action=deluser&userid=<%=rs("userid")%>><font color=#cc0000>删除</font></a>】【<a href=admin_user.asp?action=editpop&userid=<%=rs("userid")%>><font color=#cc0000>权限</font></a>】</td>
   </tr>
<%
RS.MoveNext()
next
end if
%>
</table>
<%
if pagecount > 0 then
    response.write("<table width=""95%"" align=center cellspacing=3 cellpadding=3><tr><td align=right>")
    response.write("页次：<font color=red><b>" & page & "</font>/" & pagecount & "</b>&nbsp;&nbsp;每页<b>" & pagesize & "</b>&nbsp;&nbsp;共<b>" & recordcount & "</b>个管理用户&nbsp;&nbsp;分页：")
    Spage = page mod PARTSIZE
    if page > PARTSIZE then
        if Spage = 0 then Spage = PARTSIZE
        Spage = page - Spage + 1
    else
        Spage = 1
    end if
    Epage = Spage + PARTSIZE - 1
    if Epage > pagecount then Epage = pagecount
    if page > PARTSIZE then
        response.write("<a href=""userlist.asp?page=" & Spage - 1 & """>[<<]</a>")
    end if
    for i = Spage to Epage
        if i = page then
            response.write("[<font color=red><b>" & i & "</b></font>]")
        else
            response.write("[<a href=""userlist.asp?page=" & i & """>" & i & "</a>]")
        end if
    next
    if Epage < pagecount then
        response.write("<a href=""userlist.asp?page=" & Epage + 1 & """>[>>]</a>")
    end if
    if Spage <> 1 then response.write("[<a href=""userlist.asp?page=1"">首页</a>]")
    if Epage <> pagecount then response.write("[<a href=""userlist.asp?&page=" & pagecount & """>尾页</a>]")
    response.write("</td></tr></table><br>")    
end if
rs.close
set rs=nothing
%>
<%end sub%>


<!---添加管理用户--->
<%sub adduser()%>
<table width="95%" cellspacing="1" cellpadding="3" bgcolor="#999999" align="center">
<form action="admin_user.asp?action=saveuser" method=POST name=adduser>
  <tr bgcolor="#CCCCCC"><td colspan="2" align="center"><b>添加管理用户</b></td></tr>
  <tr bgcolor=#eeeeee><td align=right width=35%>用户名：</td><td><input type=text name=username size=20></td></tr>
  <tr bgcolor=#eeeeee><td align=right>密码：</td><td><input type=text name=userpwd size=20 ></td></tr>
  <tr bgcolor=#eeeeee><td align=right>真实姓名：</td><td><input type=text name=U_name size=20 ></td></tr>
  <tr bgcolor=#eeeeee><td align=right>权限设置：</td><td><select name=userkey>
          <option value="1" selected>录入员</option>
          <option value="2">斑竹</option>
          <option value="3">管理员</option>
          <option value="4">系统管理员</option>
        </select></td></tr>
  <tr bgcolor=#eeeeee><td align=right>性别：</td><td><input type="radio" name="U_sex" value=1 >男<input type="radio" name="U_sex" value=0>女</td></tr>
  <tr bgcolor=#eeeeee><td align=right>出生年月：</td><td>
           <select name=birthyear><%for i=1901 to 2000%><option value="<%=i%>"><%=i%></option><%next%></select>年 
	    <select name=birthmonth><%for i=1 to 12%><option value="<%=i%>" ><%=i%></option><%next%></select>月 
	    <select name=birthday><%for i=1 to 31%><option value="<%=i%>" ><%=i%></option><%next%></select>日
       </td></tr>
   <tr bgcolor=#eeeeee><td align=right>电子邮件：</td><td><input type=text name=U_email size=30 ></td></tr>
   <tr bgcolor=#eeeeee><td align=right>联系电话：</td><td><input type=text name=U_tel size=30 ></td></tr>
   <tr bgcolor=#eeeeee><td align=right>QQ：</td><td><input type=text name=U_oicq size=30 ></td></tr>
   <tr bgcolor=#eeeeee><td align=right>通讯地址：</td><td><textarea name="U_address" cols="40" rows="2"></textarea></td></tr>
   <tr bgcolor=#eeeeee><td align=right>邮编：</td><td><input type=text name=U_zip size=15 ></td></tr>
   <tr bgcolor=#eeeeee><td align=right>个人简介：</td><td><textarea name="U_info" cols="40" rows="5"></textarea></td></tr>
   <tr bgcolor=#eeeeee><td></td><td><input type="submit" name="Submit" value="确定"> &nbsp;&nbsp;<input type="Reset" name="Reset" value="重填"></td></tr>
</form></table>
<%end sub%>


<!---保存添加的管理用户--->
<%sub saveuser()%>
<%if request("username")="" then%>
<script language=javascript>  
alert( "错误：请输入用户名！"  );
location.href = "javascript:history.back()"  
</script>
<%elseif request("userpwd")="" then%>
<script language=javascript>  
alert( "错误：请输入密码！"  );
location.href = "javascript:history.back()"  
</script>
<%elseif request("U_name")="" then%>
<script language=javascript>  
alert( "错误：请输入真实姓名！"  );
location.href = "javascript:history.back()"  
</script>
<%elseif request("U_sex")="" then%>
<script language=javascript>  
alert( "错误：请选择性别！"  );
location.href = "javascript:history.back()"  
</script>
<%elseif request("U_email")="" then%>
<script language=javascript>  
alert( "错误：请输入电子邮件！"  );
location.href = "javascript:history.back()"  
</script>
<%else%>
<%
dim userpwd1
userpwd1=Request("userpwd")
userip=Request.ServerVariables("REMOTE_ADDR")
birthday=trim(Request.Form("birthyear"))&"-"&trim(Request.Form("birthmonth"))&"-"&trim(Request.Form("birthday"))
set rs = server.CreateObject ("adodb.recordset")
sql = "select * from users"
	rs.Open sql,conn,1,3
	rs.AddNew
	rs("username") = Request("username")
	rs("userpwd") = md5(userpwd1)
	rs("userkey") = Request("userkey")
	rs("Addtime") = now()
	rs("LastLogintime") = now()
	rs("ArticleNum") = 0
	rs("LoginNum") = 1
	rs("LoginIP") = userip
	rs("U_name") = Request("U_name")
	rs("U_sex") = Request("U_sex")
	rs("U_email") = Request("U_email")
	rs("U_info") = Request("U_info")
	rs("U_tel") = Request("U_tel")
	rs("U_oicq") = Request("U_oicq")
	rs("U_address") = Request("U_address")
	rs("U_zip") = Request("U_zip")
	rs("U_birthday") = birthday
	rs.Update 
	rs.Close 
set rs=nothing
%>
<script language=javascript>  
alert( "管理用户添加成功"  );
location.href = "admin_user.asp"  
</script>
<%end if%>
<%end sub%>

<%sub deluser()
sql="delete from users where userid="&cstr(request("userid"))
conn.execute(sql)
response.redirect "admin_user.asp"
end sub%>


<%sub editpop()%>
<%
     set rs=server.createobject("adodb.recordset")
   sql="select userid,userkey,username from [Users] where userid="&request("userid")
   rs.open sql,conn,1,1
%>
<table width="95%" cellspacing="1" cellpadding="3" bgcolor="#999999" align="center">
<form action="admin_user.asp?action=saveeditpop&userid=<%=rs("userid")%>" method=POST name=editpop >
  <tr bgcolor="#CCCCCC"><td colspan="2" align="center"><b>修改 <%=rs("username")%> 的管理权限</b></td></tr>
  <tr bgcolor=#eeeeee><td align=right>用户名：</td><td><font color=#cc0000><%=rs("username")%></font></td></tr>
  <tr bgcolor=#eeeeee><td align=right>当前权限：</td><td><%if rs("userkey")=1 then%>录入员<%elseif rs("userkey")=2 then%>斑竹<%elseif rs("userkey")=3 then%>管理员<%end if%></td></tr>
  <tr bgcolor=#eeeeee><td align=right>权限更改：</td><td><select name=userkey>
     <option value=1>录入员</option>
     <option value=2>斑竹</option>
     <option value=3>管理员</option>
  </select></td></tr>
  <tr bgcolor=#eeeeee><td></td><td><input type="submit" name="Submit" value="确定"></td></tr>
  <form></table>
<%end sub%>

<%sub saveeditpop()%>

<%sql="update users set userkey='"&request("userkey")&"'where userid="&cstr(request("userid"))
conn.execute(sql)
%>
<script language=javascript>  
alert( "管理用户权限更改成功！"  );
location.href = "admin_user.asp"  
</script>
<%end sub%>
<table width="95%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td>&nbsp;</td>
  </tr>
</table>