save.asp

购物系统(本版为正式商业版

<!--
┌─9911.com.cn────────────┐
│  动感购物 WWW.9911.com.cn 版权所有  │
│  动感购物2005Vb  联系：[e-mail] │
└───────────9911.com.cn──┘
-->
<!--#include file="../conn.asp"-->
<!--#include file="../webconfig.asp"-->
<!--#include file="../fuction.asp" -->
<%if info<>1 then
response.Write "<script language='javascript'>alert('对不起，页面调用错误！');history.go(-1);</script>"
response.End
end if
%>

<%if info_user=0 then
if session("username")="" then
response.Redirect "info.asp"
response.End
end if
end if%>
<%
action=request("action")
select case action
case "add"
if request("kin")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写分类！');history.go(-1);</script>"
response.End
end if
if request("tit")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写主题！');history.go(-1);</script>"
response.End
end if
if request("mal")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写邮箱！');history.go(-1);</script>"
response.End
end if
if request("lxr")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写联系人！');history.go(-1);</script>"
response.End
end if
if request("tel")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写电话！');history.go(-1);</script>"
response.End
end if
if request("jg")=""  then
jg="面议"
else
jg=request("jg")
end if
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from [shop_infomsg]",conn,1,3
rs.addnew
rs("kin")=nosql(trim(request("kin")))
rs("gq")=nosql(trim(request("gq")))
rs("tit")=nosql(trim(request("tit")))
rs("mal")=nosql(trim(request("mal")))
rs("lxr")=nosql(trim(request("lxr")))
rs("tel")=nosql(trim(request("tel")))
rs("qq")=nosql(trim(request("qq")))
rs("jg")=jg
rs("lls")=0
rs("ysh")=nosql(trim(request("ysh")))
rs("msg")=nosql(trim(request("msg")))
rs("whe")=nosql(trim(request("whe")))
rs("edt")=nosql(trim(request("edt")))
rs("userid")=nosql(trim(request("userid")))
rs("tim")=now()
rs("good")=0
rs.update
rs.close
set rs=nothing
response.write "<script LANGUAGE='javascript'>alert('添加成功！');history.go(-1);</script>"
response.End
case "save"
id=request("id")
if Not isChkInteger(request("id")) then
	%>
              <script language=javascript>
		alert("参数错误！");
		window.close();
	              </script>
              <%
	response.end
end if
if request("kin")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写分类！');history.go(-1);</script>"
response.End
end if
if request("tit")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写主题！');history.go(-1);</script>"
response.End
end if
if request("mal")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写邮箱！');history.go(-1);</script>"
response.End
end if
if request("lxr")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写联系人！');history.go(-1);</script>"
response.End
end if
if request("tel")="" then
response.write "<script LANGUAGE='javascript'>alert('对不起，请填写电话！');history.go(-1);</script>"
response.End
end if
if request("jg")="" then
jg="面议"
else
jg=request("jg")
end if
set rs=server.CreateObject("adodb.recordset")
rs.open "select * from [shop_infomsg] where userid='"&checkFFSQLStr(session("username"))&"' and id="&id&" ",conn,1,3
rs("kin")=nosql(trim(request("kin")))
rs("gq")=nosql(trim(request("gq")))
rs("tit")=nosql(trim(request("tit")))
rs("mal")=nosql(trim(request("mal")))
rs("lxr")=nosql(trim(request("lxr")))
rs("tel")=nosql(trim(request("tel")))
rs("qq")=nosql(trim(request("qq")))
rs("jg")=jg
rs("ysh")=nosql(trim(request("ysh")))
rs("msg")=nosql(trim(request("msg")))
rs("whe")=nosql(trim(request("whe")))
rs("edt")=nosql(trim(request("edt")))
rs("userid")=nosql(trim(request("userid")))
rs("tim")=now()
rs("good")=0
rs.update
rs.close
set rs=nothing
response.write "<script LANGUAGE='javascript'>alert('修改成功！');history.go(-1);</script>"
response.End

case "del"
id=request("id")
if Not isChkInteger(request("id")) then
	%>
              <script language=javascript>
		alert("参数错误！");
		window.close();
	              </script>
              <%
	response.end
end if
set rs=server.createobject("adodb.connection")
conn.execute "delete from shop_infomsg where  userid='"&nosql(session("username"))&"' and id="& id
conn.close
response.write "<script LANGUAGE='javascript'>alert('删除成功！');history.go(-1);</script>"
response.End
end select
%>