other.asp

1. 硬件环境：MS WINDOWS NT PACK 4 OR LATER /WIN2000 WITH IIS 4.0 OR LATER /WIN9X+PWS 2. 数 据 库：Access2000

<!-- #include file="setup.asp" -->
<!-- #include file="inc/upfile.asp" -->
<!-- #include file="inc/function.asp" -->
<% validate "Login.asp",4
if Request.ServerVariables("request_method")="POST" then
Set rs = Server.CreateObject("ADODB.Recordset")
	set FileUP=new Upload_file 
	FileUP.GetDate(-1)
Select Case trim(FileUP.form("Submit"))
	Case "上 传"
		Ding=trim(FileUP.form("Ding"))
		selec=trim(FileUP.form("selec"))

		if selec = "" or selec = "Qxz" Then Error 2,"请选择用户号或订单号！",""
		if Ding="" Then Error 2,"请输入订单号或订单号！",""
		set file=FileUP.file("Voucher")
		if file.filesize then
		if file.filesize > 51200 then Error 2,"图片大小不得超过 50 K\n当前的文件大小为 "&int(file.filesize/1024)&" K",""
		if LCase(file.FileExt) <> "jpg" and LCase(file.FileExt) <> "gif" Then Error 2,"图片必须为GIF或JPG格式！",""
		filename="UpProductimg/Voucher/"&year(now)&month(now)&day(now)&hour(now)&minute(now)&second(now)&"."&file.FileExt
			if selec="HairID" Then	
				Sql="Select * From Finance where FinanceOrder ="&Ding
				Rs.Open Sql,Conn,1,3
				if Rs.Eof Then Error 2,"错误的订单号码！\n数据库中无此订单信息！",""
					if instr(Rs("FinanceRemarks"),"<br>")>0 Then
					Fin=Split(Rs("FinanceRemarks"),"<br>")
					Rs("FinanceRemarks")=Fin(0)&"<br>(<a href="&filename&" target=_blank>点击查看发货单！</a>)"
					Dimg=Fin(1)
					Dimg=replace(Dimg,"(<a href=UpProductimg/Voucher/","")
					Dimg=replace(Dimg,"target=_blank>点击查看发货单！</a>)","")
					DelFile "UpProductimg/Voucher/",Dimg
					Else
					Rs("FinanceRemarks")=Rs("FinanceRemarks")&"<br>(<a href="&filename&" target=_blank>点击查看发货单！</a>)"
					End if
				Rs.Update
				Rs.Close
			end if
				if selec="HairID" Then
				IncID=conn.execute("Select OrderUserID from OrderList where Ordersingle="&Ding)(0)
				messages="您好，您定购的<a href=OrderList.asp?Menu=ShowList&ID="&Ding&">"&Ding&"</a>号订单已经完成，货物已发出。请<b><a href="&filename&" target=_blank>点击查看</a></b>发货单！"
				else
				IncID=Ding
				messages="您好，您定购的订单已经完成，货物已发出。请<b><a href="&filename&" target=_blank>点击查看</a></b>发货单！"
				end if
			Rs.Open "Message",Conn,1,3
			Rs.Addnew
			Rs("PostID")=Request.Cookies("User")
			Rs("PostName")="系统信息<br>请勿回复"
			Rs("InceptID")=IncID
			Rs("InceptName")=-1
			Rs("Content")=messages
			Rs.Update
			Rs.Close
			Conn.execute("update UserInfo set UserPrestige=UserPrestige+1 where UserID="&IncID)
		File.SaveToFile Server.Mappath(filename)
		Else
		Error 2,"请选择发货单！",""
		End if
		'rs.Close
		Set Rs = Nothing
		Set FileUP = Nothing
		Set File = Nothing
		Conn.Close : Set Conn = Nothing
	Error 2,"发货单上传成功！",""
	Case "添 加"	
		NameT=Trim(FileUP.form("CJName"))
		Path=Trim(FileUP.form("CJPath"))
		if NameT="" Or Path="" Then Error 2,"不能为空！",""
		if Len(Path) < 3 Then Error 2,"非法文件名！",""
		if instr(Path,".")=0 Then Error 2,"文件名不完整，请加入文件后缀。",""
		if Instr(path,".swf")=0 and Instr(path,".asp")=0 Then Error 2,"本系统只允许Flash文件和ASP文件的设定！",""
		CJN=NameT&","&Path&"|"
		if instr(conn.execute("Select FunctionInfo from Functions where FunctionID=25")(0),CJN) > 0 Then Error 2,"与现有文件重名！",""
		conn.execute("update Functions set FunctionInfo=FunctionInfo&'"&CJN&"' where FunctionID=25")
		Application(registered&"SortPl")=""
		Set FileUP = Nothing
		Set File = Nothing
		Conn.Close : Set Conn = Nothing
		response.redirect "?Menu=Plug-in"
	Case "删 除"
		Tname=FileUP.form("TName")
		CJ=conn.execute("Select FunctionInfo from Functions where FunctionID=25")(0)
		CJN=replace(CJ,Tname&"|","")&"|"
		CJN=replace(CJN,"||","|")
		conn.execute("update Functions set FunctionInfo='"&CJN&"' where FunctionID=25")
		Application(registered&"SortPl")=""
		Name=Split(Tname,",")
		DelFile "./Plug-in/",Name(0)
		Conn.Close : Set Conn = Nothing
		Set FileUP = Nothing
		Set File = Nothing
		Response.redirect "?Menu=Plug-in"
	Case "发 送"
		Title=FileUP.form("title")
		Body=FileUP.form("body")
		Body=Replace(Body,vbCrlf,"<br>")
		if Title="" or Body="" Then Error 2,"标题和广播内容不能为空！",""
		if Len(Title) > 40 Then Error 2,"标题不能超过20个中文字符或40个英文字母！",""
		Gangbo=Title&"|"&Body
		if FileUP.form("Open")="No" Then 
		conn.execute("update Functions set FunctionOC=True where FunctionID=19")
		Else
		conn.execute("update Functions set FunctionOC=False where FunctionID=19")
		End if
		conn.execute("update Functions set FunctionInfo='"&Gangbo&"' where FunctionID=19")
		Conn.Close : Set Conn = Nothing
		Set FileUP = Nothing
		Set File = Nothing
		Response.redirect "?Menu=Broadcast"
	Case "确定"
		Body=FileUP.form("body")
		Body=Replace(Body,vbCrlf,"<br>")
		Conn.Execute("update Functions set FunctionInfo='"&Body&"' where FunctionID=9")
		Conn.Close : Set Conn = Nothing
		Set FileUP = Nothing
		Set File = Nothing
		Response.redirect "?Menu=bank"
	Case "确 定"
		imgurl=FileUP.form("imgurl")
		imglink=FileUP.form("imglink")
		if imgurl="" Or imglink="" Then Error 2,"不能为空！",""
		image=imglink&","&imgurl&"|"
		conn.execute("update Functions set FunctionInfo=FunctionInfo&'"&image&"' where FunctionID=17")
		Application(registered&"Friend")=""
		Conn.Close : Set Conn = Nothing
		Set FileUP = Nothing
		Set File = Nothing
		Response.redirect "?Menu=Friend"
	Case "删除连接"
		DelFriend=Trim(FileUP.form("DelFriend"))
		IF DelFriend="" Then Error 2,"请选择您要删除的连接！",""
		AllFriend=conn.execute("Select FunctionInfo from Functions where FunctionID=17")(0)
		AllFriend=replace(AllFriend,DelFriend&"|","")&"|"
		AllFriend=replace(AllFriend,"||","|")
		conn.execute("update Functions set FunctionInfo='"&AllFriend&"' where FunctionID=17")
		Application(registered&"Friend")=""
		Conn.Close : Set Conn = Nothing
		Set FileUP = Nothing
		Set File = Nothing
		Response.redirect "?Menu=Friend"
End Select
Rs.Close
Conn.Close
Set FileUP = Nothing
Set File = Nothing
Set Rs = Nothing
Set Conn = Nothing
Response.end
End if
Call Top
Call table()
Response.Write("<style><!--	TABLE{BORDER-TOP:0px;BORDER-LEFT:0px;BORDER-BOTTOM:1px}TD{BORDER-RIGHT:0px;BORDER-TOP:0px}--></style><br>")
Menu=Request.QueryString("menu")
Select Case Menu
Case "Hair"
Tab "上传发货单！","在此，你可以把给客户发货后的发货单据上传至服务器."%>
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<form method="POST" name="form" enctype="multipart/form-data">
	<TR> 
	<TD  height=12 width="75%" > <div align="center">
	<select name="selec" id="selec">
    <option value="Qxz">请选择</option>
	<option value="HairID">订单号</option>
    <option value="UserID">用户号</option>
    </select>
	<input name="Ding" type="text" size="10" maxlength="20" Value=<%= Request("OrID") %>>&nbsp;发货单： 
	<input type="file" name="Voucher"  size="20">&nbsp; 
	<input type="submit" name="Submit" value="上 传">
	</div></TD>
	</TR></form>
	</table>
<%Case "Plug-in"
Tab "社区娱乐插件设定","将文件传至服务器""Plug-in""目录后在下面输入文件名称。"%>
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<form method="POST" name="form"  enctype="multipart/form-data">
	<TR><TD width="75%" > <div align="center"><table width="80%" border="0">
	<tr><td width="16%" height="23"> <div align="center"> </div></td>
	<td width="17%" > <div align="right">插件名称: </div></td>
	<td width="18%" ><input name="CJName" type="text" id="CJName2" size="15" maxlength="20"></td>
	<td width="17%" > <div align="right">文件名:</div></td>
	<td width="23%" ><input name="CJPath" type="text" size="15" maxlength="20"></td>
	<td width="9%"><div align="center"> <input type="submit" name="Submit" value="添 加">
	</div></td></tr></table></div></TD>
	</TR></form></table>
	
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<TR> 
	<TD  height=12 width="75%" >&nbsp;<img src="images/2.gif" width="60" height="9">现有插件: 
	</TD>
	</TR>
    </table>
	
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<form method="POST" name="form"  enctype="multipart/form-data">
	<TR><TD width="75%" > <div align="center">
		<table width="100%" border="0">
		<%Puin=Split(conn.execute("Select FunctionInfo from Functions where FunctionID=25")(0),"|")
		For i=0 to Ubound(Puin)-1
		Response.write "<tr><td width=50% ><div align=right><input name=TName type=radio value="&Puin(i)&"></div></td><td>"&Replace(Puin(i),",","&nbsp;----&nbsp;")&"</td></tr>"
		Next%>
		</table>
		<input type="submit" name="Submit" value="删 除">
		</TD>
		</TR></form></table>
<%Case "Friend"
Tab "社区友情连接","在下面输入图片的路径和相对应的网址"%>
<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<form method="POST" name="form"  enctype="multipart/form-data">
	<TR><TD width="75%" > <div align="center"><table width="80%" border="0">
	<tr><td width="14%" height="23"> 
    <div align="center"> </div></td>
	<td width="17%" > <div align="right">图片路径 </div></td>
	<td width="14%" ><input name="imgurl" type="text" id="CJName2" size="15"></td>
	<td width="21%" > <div align="right">链接网址(URL)</div></td>
	<td width="23%" ><input name="imglink" type="text" size="15"></td>
	<td width="11%"><div align="center"> <input type="submit" name="Submit" value="确 定">
	</div></td></tr></table></div></TD>
	</TR></form></table>
	
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<TR> 
	<TD  height=12 width="75%" >&nbsp;<img src="images/2.gif" width="60" height="9">现有连接: 
	</TD>
	</TR>
    </table>
	
	
		
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<form method="POST" name="form"  enctype="multipart/form-data">
	<TR>
    <TD width="75%" > <div align="center">
	<%Puin=Split(conn.execute("Select FunctionInfo from Functions where FunctionID=17")(0),"|")
	
	
	Response.write "<table border=0 cellpadding=0 cellspacing=4 style=border-collapse: collapse width=100% >"
	do while i < Ubound(Puin)-1
	Response.write "<tr>"
		For i=i to i+4
		if i > Ubound(Puin)Then Exit For
		img=Split(Puin(i),",")
		if Puin(i)<>"" Then	Response.write "<td><a href="&img(0)&" target=_blank><img src="&img(1)&" border=0 width=88 height=31></a><input name=DelFriend type=radio value="&Puin(i)&">|</td>"
		Next
		Response.write "<tr>"
	loop
	Response.write "</table>"
	

	
	%> <br>
    <input type="submit" name="Submit" value="删除连接">
    </div></TD>
	</TR></form></table>
	
	<%Case "Broadcast"
	Tab "信息广播","支持Html语言！"
	Guangbo=Split(conn.execute("Select FunctionInfo from Functions where FunctionID=19")(0),"|")
	%>
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<form method="POST" name="form"  enctype="multipart/form-data">
	<TR>
	<TD width="75%" > <div align="center"> <div align="center">标题：
	<input name="title" type="text" id="title" maxlength="30" value="<%= Guangbo(0) %>"> 弹出 <input name="Open" type="checkbox" value="No">
	<br><br>
	<textarea name="body" cols="40" rows="10" id="body" ><%= Replace(Guangbo(1),"<br>",vbCrlf) %></textarea>
	<br><br><input type="submit" name="Submit" value="发 送">
	</div></TD></TR></form></table>
	<%Case "bank"
	Tab "银行汇款信息：","支持Html语言！"

	%>
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse" ID="Table1">
	<form method="POST" name="form"  enctype="multipart/form-data" ID="Form1">
	<TR>
	<TD width="75%" > <br>
	<textarea name="body" cols="80" rows="10" id="Textarea1" ><%= Replace(Conn.execute("Select FunctionInfo from Functions where FunctionID=9")(0),"<br>",vbCrlf) %></textarea>
	<br><br><input type="submit" name="Submit" value="确定" ID="Submit1">
	</div></TD></TR></form></table>
	<%
	
	
	
Case "GengXin"
	Application(registered&"TheWord")=""
	Application(registered&"Commend")=""
	Application(registered&"NewP")=""
	Application(registered&"TTime")=""
	Application(registered&"SortTop")=""
	Application(registered&"SortPl")=""
	Application(registered&"BbsMenu")=""
	Application(registered&"Friend")=""
	Application(registered&"topline")=""
	Application(registered&"ProductI")=""
	Application(registered&"ProductII")=""
	Application(registered&"ProductIII")=""
	Application(registered&"bottom")=""
	Error 2,"系统缓存已经全部清空！",""
Case "RePsd"
<!--#include file ="inc/function.asp"-->

	User_ID=Request.QueryString("UserID")
	'if Trim(Request.Cookies("Product")) <= Trim(Conn.Execute("Select UserGrade From UserInfo where UserID="&User_ID&" and DelThis=False")(0)) Then Error 2,"您没有权限为该用户设置密码！",""
	'Response.write Request.Cookies("Product")
	'Response.write Conn.Execute("Select UserGrade From UserInfo where UserID="&User_ID&" and DelThis=False")(0)
	'Response.end
	
	if User_ID="" or isnumeric(User_id)=False Then Error 1,"参数非法传递！",""
	if Conn.Execute("Select count(UserID) From UserInfo Where UserID = "&User_ID)(0) = 0 Then Error 2,"没有您需要的用户信息!",""
	Conn.Execute("Update UserInfo Set UserPsd = '"&Encrypt("11111")&"' Where UserID = "&User_ID)
	Error 1,"密码初始成功！\n用户新密码：11111",""
Case Else
Error 1,"非法信息传递\n您的IP已被记录",""
End Select


Htmlend
Sub Tab(Msg1,Msg2)%>
	<table borderColor="#a4b6d7" cellSpacing="0" cellPadding="0" width="100%" border="1" style="border-left: 0px none; border-top: 0px none; border-bottom: 1px none; border-collapse:collapse">
	<tr><td height="25" background=images/title_sub.gif style="border-right: 0px none; border-top: 0px none"> 
	<b>&nbsp;■ </b><%= Msg1 %></td>
	</tr></table>
	<TABLE borderColor=#a4b6d7 cellSpacing=0 cellPadding=3 width=100% border=1 style="border-collapse: collapse">
	<TR> 
	<TD  height=12 width="75%" >&nbsp;<img src="images/2.gif" width="60" height="9"><%= Msg2 %></TD>
	</TR></TABLE>
<%End Sub%>