admin_user_add_save.asp

电影ASP文件

<!--#include file="session.asp"-->
<!--#include file="../set_url.asp"-->
<!--#include file="../film_conn.asp"-->
<!--#include file="md5.asp"-->
<%
if session("flag")>1 then
response.write "<br><p align=center>您的操作权限不够！</p>"
response.end
end if
%>
<%
   username=LCase(Request("username"))
   username=replace(username,"'","")
   username=replace(username,"%","")
   
   password=LCase(Request("newpin"))
   password=replace(password,"'","")
   password=replace(password,"%","")
   
   flag=Request("flag")

if username="" or password="" or flag="" then
response.write "<br><p align=center>所有参数不能为空！</p>"
response.end
end if

   Set rs=Server.CreateObject("Adodb.RecordSet")
   
   rs.Open "Select * from admin_pwd where admin_name='"&username&"'",conn

   if not rs.EOF then

   Response.Write "<font color=red><div align=center><br><br>该用户名已经存在！</div></font>"
   Response.End   

   end if
   rs.close
   sql="select * from admin_pwd"
   rs.open sql,conn,1,3
   rs.addnew
   rs("admin_name")=username
   rs("admin_pwd")=md5(password)
   rs("flag")=flag
   rs("ip")=Request("REMOTE_ADDR")
   rs("logintime")=now()
   rs.update
   rs.Close
   set rs=Nothing
   
   conn.Close
   set conn=Nothing

   Response.Redirect "admin_user.asp"
%>