administrator.jsp

用JSP写的一个在线购物网站的代码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*" %>
<jsp:useBean id="data" scope="page" class="shop.data.conn" />
<%
String admin=(String)session.getValue("admin");
if(admin=="" || admin==null)
{%>
<script language="javascript">
alert("请登陆后再执行管理操作");
self.location="index.jsp";
</script>
<%}else{
String sql="select * from admin where admin='"+admin+"' and system='"+"1"+"'";
ResultSet rs=data.executeQuery(sql);
if(!rs.next())
{%>
<script language="javascript">
alert("对不起，您不是系统管理员不能进行相应操作");
history.back();
</script>
<%}}%>
<%
String del=request.getParameter("del");
if(del!="" && del!=null)
{
String sql="delete from admin where admin='"+del+"'";
ResultSet rs=data.executeQuery(sql);
}
%>
<style type="text/css">
<!-- @import url(../images/css.css); -->
</style>
<script language="JavaScript">
function check()
{
  if(document.thisadmin.newpwd.value!=document.thisadmin.repwd.value)
  {
    alert("请检查您两次输入的密码是否相同？");
	document.thisadmin.repwd.focus();
	return false;
  }
}
function add()
{
   window.open("addadmin.jsp","body","width=250,height=190");
}
</script>
<br><br>
<table width="400" height="30" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td bgcolor="3969A5"><div align="center"><font color="#FFFFFF" size="3">　　　　　　　　　系统用户列表</font>　　　　<a href="javascript:add()"><font color="#CCCCCC">　　　添加管理员</font></a></div></td>
  </tr>
</table>
<table width="400" border="0" align="center" cellpadding="0" cellspacing="0" bgcolor="#CCCCCC">
  <tr>
    <td><table width="100%" border="0" cellspacing="1" cellpadding="0">
<%
String sql="select * from admin order by id desc";
ResultSet rs=data.executeQuery(sql);
admin="";
String password="";
String system="";
while(rs.next())
{
admin=rs.getString("admin");
password=rs.getString("password");
system=rs.getString("system");
%>
<tr bgcolor="#FFFFff">
  <td width="180" height="20"><div align="center"><a href="administrator.jsp?edit=<%=admin%>"><%=admin%></a></div></td>
  <td width="140"><div align="center">
  <%
  if(system.equals("0"))
  { system="普通管理员"; }
  if(system.equals("1"))
  { system="系统管理员"; }
  %><%=system%></div></td>
  <td width="40"><div align="center"><a href="administrator.jsp?edit=<%=admin%>"><font color="#FF0000">编辑</font></a></div></td>
  <td width="40"><div align="center"><a href="administrator.jsp?del=<%=admin%>"><font color="#FF0000">删除</font></a></div></td>
</tr>
<%}%>
      </table></td>
  </tr>
</table>
<table width="400" height="15" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr> 
    <td bgcolor="3969A5"><div align="center"></div></td>
  </tr>
</table>
<br><br>
<%
String edit=request.getParameter("edit");
if(edit!="" && edit!=null)
{
sql="select * from admin where admin='"+edit+"'";
rs=data.executeQuery(sql);
String sys="";
rs.next();
String aid=rs.getString("admin");
String pass=rs.getString("password");
String getsys=rs.getString("system");
%><div align="center">
<form action="" method="post" name="thisadmin" onSubmit="return check()">
<input type="hidden" name="update" value="">
<input type="hidden" name="aid" value="<%=aid%>">
<table width="200" border="0" cellpadding="0" cellspacing="0" >
<tr>
<td width="100" height="25"><div align="center">用户ID:</div></td>
<td width="100"><%=aid%></td>
</tr>
<tr>
<td width="100" height="25"><div align="center">旧密码:</div></td>
<td width="100"><input type="password" name="pwd" size="15" maxlength="10" value="<%=pass%>" style="background-color:#ECECEC; border-style:1; font-size: 11; color: #000000; font-family: arial, verdana, geneva"></td>
</tr>
<tr>
<td width="100" height="25"><div align="center">新密码:</div></td>
<td width="100"><input type="password" name="newpwd" size="15" maxlength="10" style="background-color:#ECECEC; border-style:1; font-size: 11; color: #000000; font-family: arial, verdana, geneva"></td>
</tr>
<tr>
<td wdith="100" height="25"><div align="center">重复新密码:</div></td>
<td width="100"><input type="password" name="repwd" size="15" maxlength="10" style="background-color:#ECECEC; border-style:1; font-size: 11; color: #000000; font-family: arial, verdana, geneva"></td>
</tr>
<tr>
<td width="100" height="25"><div align="center">系统权限:</div></td>
<td width="100"><select name="setsys" style="background-color:#ECECEC; border-style:1; font-size: 11; color: #000000; font-family: arial, verdana, geneva">
                               <%
							   if(getsys.equals("0"))
							   { sys="普通管理员"; }
							   if(getsys.equals("1"))
							   { sys="系统管理员"; }
							   %><option value='<%=getsys%>'><%=sys%></option>
							         <option value='0'>普通管理员</option>
									 <option value='1'>系统管理员</option></select></td>
</tr>
</table><br>
<input type="submit" value="修改" style="background-color:#ECECEC; border-style:1; font-size: 11; color: #000000; font-family: arial, verdana, geneva" onClick="document.all.update.value='true';">
<input type="reset" value="复位" style="background-color:#ECECEC; border-style:1; font-size: 11; color: #000000; font-family: arial, verdana, geneva">
</form>
</div>
<%
rs.close();}
%>
<%
String update=request.getParameter("update");
if(update!=null && update.equals("true"))
{
String aid=request.getParameter("aid");
String pwd=request.getParameter("pwd");
String newpwd=request.getParameter("newpwd");
if(!newpwd.equals(""))
{ pwd=newpwd; }
String setsys=request.getParameter("setsys");
sql="update admin set password='"+pwd+"',system='"+setsys+"' where admin='"+aid+"'";
rs=data.executeQuery(sql);
response.sendRedirect("administrator.jsp");
}
%>