delmess.asp

不是我做的一个留言板

<%@ language=vbscript %>
<%
if session("username")="" then
response.redirect "log.asp"
end if
set conn=server.createobject("adodb.connection")
dbpath=server.mappath("mis.mdb")
conn.open "driver={microsoft access driver (*.mdb)};dbq=" & dbpath
sql1 = "select * from message where id="&request("id")
set rs1=server.createobject("adodb.recordset")
rs1.open sql1,conn,3,3
laccname=rs1("accname")
if session("username")=laccname then
sql = "delete * from message where id="&request("id")
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
response.redirect "per.asp"
else 
response.write "非法拥护！"
end if
%>