admin_pic.asp

本程序采用花香内核

<%Admin="pic"%>
<!--#include file="check.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="mdb.asp"-->
<!--#include file="inc/FORMAT.asp"-->
<%
if session("adminlogin")<>sessionvar then
  Response.Write("<script language=javascript>alert('你尚未登录，或者超时了！请重新登录');this.top.location.href='admin.asp';</script>")
  response.end
else
if request.form("MM_insert") then
if request.form("action")="newpiccat" then
sql="select * from piccat"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim piccatname,sid
sid=request.form("id")
piccatname=trim(replace(request.form("piccat_name"),"'",""))
if piccatname="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写分类名称！');history.back(1);</script>")
else
  rs("piccat_name")=piccatname
end if
  rs("sid")=sid
if founderr then
  call diserror()
  response.end
else
  rs.update
  rs.close
  set rs=nothing
  response.redirect "admin_pic.asp?action=piccat"
end if
elseif request.form("action")="newpic" then
sql="select * from pic"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim piccatid,picname,picurl,picpic,picspic,picdesc,picisbest,tjuser
piccatid=cint(request.form("piccatid"))
picname=trim(replace(request.form("name"),"'",""))
picurl=trim(replace(request.form("url"),"'",""))
picpic=trim(replace(request.form("pic"),"'",""))
picspic=trim(replace(request.form("spic"),"'",""))
picdesc=trim(replace(request.form("desc"),"'",""))
picisbest=request.form("isbest")
tjuser=request.form("tjuser")
if picname="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片标题！');history.back(1);</script>")
else
  rs("pic_name")=picname
end if
if piccatid<1 then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须选择图片所属分类！');history.back(1);</script>")
else
  rs("piccat_id")=piccatid
end if
if picurl="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写文件大小！');history.back(1);</script>")
else
  rs("pic_url")=picurl
end if
if picspic="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写缩图地址！');history.back(1);</script>")
else
  rs("pic_spic")=picspic
end if
if picpic="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片地址！');history.back(1);</script>")
else
  rs("pic_pic")=picpic
end if
if picdesc="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片的简要说明！');history.back(1);</script>")
else
  rs("pic_desc")=picdesc
end if
if cint(picisbest)=1 then
  rs("isbest")=cint(picisbest)
end if
  rs("tjuser")=tjuser
if founderr then
  call diserror()
  response.end
else
  rs.update
  rs.close
  set rs=nothing
  sql="update allcount set piccount = piccount + 1"
  conn.execute(sql)
  
  response.redirect "admin_pic.asp?action=pic"
end if
elseif request.form("action")="editpic" then
if request.Form("id")="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须指定操作的对象！');history.back(1);</script>")
else
  if not isInteger(request.form("id")) then
    founderr=true
    Response.Write("<script language=javascript>alert('非法的id参数。');history.back(1);</script>")
  end if
end if
if founderr then
  call diserror()
  response.End
end if
sql="select * from pic where pic_id="&cint(request.form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
piccatid=cint(request.form("piccatid"))
picname=trim(replace(request.form("name"),"'",""))
picurl=trim(replace(request.form("url"),"'",""))
picpic=trim(replace(request.form("pic"),"'",""))
picspic=trim(replace(request.form("spic"),"'",""))
picdesc=trim(replace(request.form("desc"),"'",""))
picisbest=request.form("isbest")
tjuser=request.form("tjuser")
if picname="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片标题！');history.back(1);</script>")
else
  rs("pic_name")=picname
end if
if piccatid<1 then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须选择图片所属分类！');history.back(1);</script>")
else
  rs("piccat_id")=piccatid
end if
if picurl="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片大小！');history.back(1);</script>")
else
  rs("pic_url")=picurl
end if
if picspic="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写缩图地址！');history.back(1);</script>")
else
  rs("pic_spic")=picspic
end if
if picpic="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片地址！');history.back(1);</script>")
else
  rs("pic_pic")=picpic
end if
if picdesc="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写图片的简要说明！');history.back(1);</script>")
else
  rs("pic_desc")=picdesc
end if
  rs("isbest")=cint(picisbest)
  rs("tjuser")=tjuser
if cint(picisbest)=1 then
sql="UPDATE [user] SET points = points + 30 where username='"&tjuser&"'"
conn.execute (sql)
end if
if founderr then
  call diserror()
  response.end
else
  rs.update
  rs.close
  set rs=nothing
  response.redirect "admin_pic.asp?action=pic"
end if
elseif request.form("action")="delpic" then
if request.Form("id")="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须指定操作的对象！');history.back(1);</script>")
else
  if not isInteger(request.form("id")) then
    founderr=true
    Response.Write("<script language=javascript>alert('非法的id参数。');history.back(1);</script>")
  end if
end if
if founderr then
  call diserror()
  response.End
end if
sql="select * from pic where pic_id="&cint(request.form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
  rs.delete
  rs.close
  sql="update allcount set piccount = piccount - 1"
  conn.execute(sql)
  response.redirect "admin_pic.asp?action=pic"
elseif request.form("action")="editpiccat" then
if request.Form("id")="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须指定操作的对象！');history.back(1);</script>")
else
  if not isInteger(request.form("id")) then
    founderr=true
    Response.Write("<script language=javascript>alert('非法的分类id参数。');history.back(1);</script>")
  end if
end if
if founderr then
  call diserror()
  response.End
end if
sql="select * from piccat where piccat_id="&cint(request.form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
piccatname=trim(replace(request.form("piccat_name"),"'",""))
if piccatname="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须填写分类名称！');history.back(1);</script>")
else
  rs("piccat_name")=piccatname
end if
sid=request.form("lid")
  rs("sid")=sid
if founderr then
  call diserror()
  response.end
else
  rs.update
  rs.close
  set rs=nothing
  response.redirect "admin_pic.asp?action=piccat"
end if
elseif request.form("action")="delpiccat" then
if request.Form("id")="" then
  founderr=true
  Response.Write("<script language=javascript>alert('你必须指定操作的对象！');history.back(1);</script>")
else
  if not isInteger(request.form("id")) then
    founderr=true
    Response.Write("<script language=javascript>alert('非法的分类id参数。');history.back(1);</script>")
  end if
end if
if founderr then
  call diserror()
  response.End
end if
sql="select * from piccat where piccat_id="&cint(request.form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
  rs.delete
  rs.close
  set rs=nothing
  response.redirect "admin_pic.asp?action=piccat"
end if
end if%>
<HTML><HEAD><TITLE>管理中心</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<LINK href="inc/admin.css" type=text/css rel=StyleSheet>
<META content="MSHTML 6.00.2800.1126" name=GENERATOR>
</HEAD>
<body onkeydown=return(!(event.keyCode==78&&event.ctrlKey))>
     <%if request.querystring("action")="piccat" then
sql="select * from piccat where sid=0 order by piccat_id DESC"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1%> 
<table align="center" width="98%" align="center" border="1" cellspacing="0" cellpadding="4" class=lanyubk style="border-collapse: collapse">
<tr> 
<td colspan="4" class=lanyuss>图片移动、合并管理(请慎重操作，操作后不可还原!)</font></td>
</tr>
<form method="post" action="admin_cat_hp.asp?action=pic">
<tr align="center"> 
<td height=22 align=center class=lanyuqs>将：
<select size="1" name="cat1">
<%
sql="select * from piccat where sid=0"
set rs1=conn.execute(sql)
do while not rs1.eof
response.write "<optgroup label='"&rs1("piccat_name")&"'>"
sql="select * from piccat where sid="&rs1("piccat_id") 
set rs2=server.createobject("adodb.recordset")
rs2.open sql,conn,1,1
do while not rs2.eof
%>
              <option value="<%=rs2("piccat_id")%>">├ <%=rs2("piccat_name")%></option>
<%
rs2.movenext