add_insert.asp

不是我做的一个留言板

<!--#include file="../main/conn.asp" -->
<!--#include file="admin_session.asp" -->
<%
web_id1="../language/"
web_id=web_id1&l_id&"/WELCOM_MSG.ASP"
call include(web_id)
s_id=request.QueryString("s_id")
insert_name=trim(request.form("insert_name"))
insert_url=trim(request.form("insert_url"))

if s_id="add" then
insert_sql="insert into [insert] (insert_name,insert_url,g_id)values('"&insert_name&"','"&insert_url&"','"&session_cookie_gid&"')"
log_msg=L_WELCOM_MSG19

else

id=request.QueryString("id")

if s_id="edit" then
insert_sql="update [insert] set insert_name='"&insert_name&"',insert_url='"&insert_url&"' where id="&id
log_msg=L_WELCOM_MSG20
end if
if s_id="del" then
insert_sql="delete from [insert] where id="&id
log_msg=L_WELCOM_MSG21

end if
end if
conn.execute(insert_sql)
RESPONSE.REDIRECT "admin_insert.asp"
%>