📄 admin.asp
字号:
<%@LANGUAGE="VBSCRIPT"%>
<!--#include file="Connections/guestbook.asp" -->
<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers=""
MM_authFailedURL="login.asp"
MM_grantAccess=false
If Session("MM_Username") <> "" Then
If (true Or CStr(Session("MM_UserAuthorization"))="") Or _
(InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
MM_grantAccess = true
End If
End If
If Not MM_grantAccess Then
MM_qsChar = "?"
If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
MM_referrer = Request.ServerVariables("URL")
if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
Response.Redirect(MM_authFailedURL)
End If
%>
<%
' *** Edit Operations: declare variables
Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd
Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId
Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i
MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME"))
If (Request.QueryString <> "") Then
MM_editAction = MM_editAction & "?" & Request.QueryString
End If
' boolean to abort record edit
MM_abortEdit = false
' query string to execute
MM_editQuery = ""
%>
<%
' *** Update Record: set variables
If (CStr(Request("MM_update")) = "form1" And CStr(Request("MM_recordId")) <> "") Then
MM_editConnection = MM_guestbook_STRING
MM_editTable = "admin"
MM_editColumn = "id"
MM_recordId = "" + Request.Form("MM_recordId") + ""
MM_editRedirectUrl = "admin.asp"
MM_fieldsStr = "f_name|value|f_password|value"
MM_columnsStr = "f_name|',none,''|f_password|',none,''"
' create the MM_fields and MM_columns arrays
MM_fields = Split(MM_fieldsStr, "|")
MM_columns = Split(MM_columnsStr, "|")
' set the form values
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
Next
' append the query string to the redirect URL
If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
Else
MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
End If
End If
End If
%>
<%
' *** Update Record: construct a sql update statement and execute it
If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then
' create the sql update statement
MM_editQuery = "update " & MM_editTable & " set "
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_formVal = MM_fields(MM_i+1)
MM_typeArray = Split(MM_columns(MM_i+1),",")
MM_delim = MM_typeArray(0)
If (MM_delim = "none") Then MM_delim = ""
MM_altVal = MM_typeArray(1)
If (MM_altVal = "none") Then MM_altVal = ""
MM_emptyVal = MM_typeArray(2)
If (MM_emptyVal = "none") Then MM_emptyVal = ""
If (MM_formVal = "") Then
MM_formVal = MM_emptyVal
Else
If (MM_altVal <> "") Then
MM_formVal = MM_altVal
ElseIf (MM_delim = "'") Then ' escape quotes
MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
Else
MM_formVal = MM_delim + MM_formVal + MM_delim
End If
End If
If (MM_i <> LBound(MM_fields)) Then
MM_editQuery = MM_editQuery & ","
End If
MM_editQuery = MM_editQuery & MM_columns(MM_i) & " = " & MM_formVal
Next
MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId
If (Not MM_abortEdit) Then
' execute the update
Set MM_editCmd = Server.CreateObject("ADODB.Command")
MM_editCmd.ActiveConnection = MM_editConnection
MM_editCmd.CommandText = MM_editQuery
MM_editCmd.Execute
MM_editCmd.ActiveConnection.Close
If (MM_editRedirectUrl <> "") Then
Response.Redirect(MM_editRedirectUrl)
End If
End If
End If
%>
<%
Dim admin__MMColParam
admin__MMColParam = "1"
If (Request.QueryString("id") <> "") Then
admin__MMColParam = Request.QueryString("id")
End If
%>
<%
Dim admin
Dim admin_numRows
Set admin = Server.CreateObject("ADODB.Recordset")
admin.ActiveConnection = MM_guestbook_STRING
admin.Source = "SELECT * FROM admin WHERE id = " + Replace(admin__MMColParam, "'", "''") + ""
admin.CursorType = 0
admin.CursorLocation = 2
admin.LockType = 1
admin.Open()
admin_numRows = 0
%><title>系统更改</title>
<link rel="stylesheet" href="css.css" type="text/css">
<body background="images/forum_bgcolor.gif">
<table width="350" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td>
<form method="post" action="<%=MM_editAction%>" name="form1">
<table width="280" border="0" cellspacing="1" cellpadding="0" align="center" bgcolor="#CCCCCC">
<tr>
<td bgcolor="#F1F2F3" align="center" background="images/catbg.gif" height="30">
<table width="195" border="0" cellspacing="0" cellpadding="0" background="images/bg11.gif">
<tr align="center">
<td height="31"><a href="index.asp">首 页</a></td>
<td height="31"><a href="xt.asp">资 料</a></td>
<td height="31"><a href="admin.asp">密 码</a></td>
</tr>
</table>
</td>
</tr>
<tr>
<td background="images/2_22.gif" height="24"> </td>
</tr>
</table>
<table align="center" width="280" cellspacing="1" bgcolor="#000000">
<tr valign="baseline">
<td nowrap align="right" bgcolor="#F1F2F3">用户:</td>
<td bgcolor="#F1F2F3" align="center">
<input type="password" name="f_name" value="<%=(admin.Fields.Item("f_name").Value)%>" size="32" style="background-color: #c1d8f1; BORDER-RIGHT: #42a5f7 1px dotted; BORDER-TOP: #42a5f7 1px dotted; BORDER-LEFT: #42a5f7 1px dotted; BORDER-BOTTOM: #42a5f7 1px dotted">
</td>
</tr>
<tr valign="baseline">
<td nowrap align="right" bgcolor="#F9FAFB">密码:</td>
<td align="center" bgcolor="#F9FAFB">
<input type="password" name="f_password" value="<%=(admin.Fields.Item("f_password").Value)%>" size="32" style="background-color: #c1d8f1; BORDER-RIGHT: #42a5f7 1px dotted; BORDER-TOP: #42a5f7 1px dotted; BORDER-LEFT: #42a5f7 1px dotted; BORDER-BOTTOM: #42a5f7 1px dotted">
</td>
</tr>
<tr valign="baseline" align="center">
<td nowrap colspan="2" height="30" background="images/catbg.gif">
<input type="submit" value="更 改" style="border:1 solid #000000;background:#ffffff" class="button">
</td>
</tr>
</table>
<input type="hidden" name="MM_update" value="form1">
<input type="hidden" name="MM_recordId" value="<%= admin.Fields.Item("id").Value %>">
</form>
</td>
</tr>
</table>
<%
admin.Close()
Set admin = Nothing
%>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -