password_updata.asp

c++builder开发系统实现了成绩查寻

<%@LANGUAGE="JAVASCRIPT" CODEPAGE="936"%>
<!--#include file="session_2.asp" -->
<!--#include file="Connections/conn1.asp" -->
<%
var newpsd=Request("newpsd")(1);
var rs__adminname = "0";
   if (String(Session("adminname")) != "undefined" && 
      String(Session("adminname")) != "") { 
      rs__adminname = String(Session("adminname"));
      }
var rs__adminpsd = "1";
      if (String(Request("propsd")) != "undefined" && 
             String(Request("propsd")) != "") { 
            rs__adminpsd = String(Request("propsd"));
           }      
var rs__userno = "0";
   if (String(Session("userno")) != "undefined" && 
      String(Session("auserno")) != "") { 
      rs__userno = String(Session("userno"));
       }	
var rs__userpsd = "1";
      if (String(Request("propsd")) != "undefined" && 
             String(Request("propsd")) != "") { 
            rs__userpsd = String(Request("propsd"));
           }	     
%>
<%
if(Session("rank")==0||Session("rank")==1)
  {
     var rs = Server.CreateObject("ADODB.Recordset");
     rs.ActiveConnection = MM_conn1_STRING;
     rs.Source = "SELECT adminname, adminpsd  FROM admin  WHERE adminname='"+ rs__adminname + "' AND adminpsd='"+ rs__adminpsd + "'";
     rs.CursorType = 0;
     rs.CursorLocation = 2;
     rs.LockType = 1;
     rs.Open(); 
	 if(rs.BOF&&rs.EOF)
	      {Response.Write("<script language='javascript'> window.alert('您输入的原密码有误'); history.go(-1);</script>")
	      Response.End();
		  }
	 else
	    {	
		var Command1 = Server.CreateObject("ADODB.Command");
        Command1.ActiveConnection = MM_conn1_STRING;
        Command1.CommandText = "UPDATE admin  SET adminpsd ='"+newpsd+"' WHERE adminname='"+rs__adminname+"'";
        Command1.CommandType = 1;
        Command1.CommandTimeout = 0;
        Command1.Prepared = true;
        Command1.Execute();   
		Response.Write("<script language='javascript'>window.alert('修改成功'); history.go(-1);</script>")
		} 	   
	 
	 rs.Close();
  }

if(Session("rank")=="norank")
  {
     var rs = Server.CreateObject("ADODB.Recordset");
     rs.ActiveConnection = MM_conn1_STRING;
     rs.Source = "SELECT userno, userpsd  FROM user  WHERE userno='"+ rs__userno+ "' AND userpsd='"+ rs__userpsd + "'";
     rs.CursorType = 0;
     rs.CursorLocation = 2;
     rs.LockType = 1;
     rs.Open(); 
	 if(rs.BOF&&rs.EOF)
	      {Response.Write("<script language='javascript'>window.alert('您输入的原密码有误'); history.go(-1);</script>")
	       Response.End();
		   }
	 else
	    {	
		var Command1 = Server.CreateObject("ADODB.Command");
        Command1.ActiveConnection = MM_conn1_STRING;
        Command1.CommandText = "UPDATE user  SET userpsd ='"+newpsd+"' WHERE userno='"+rs__userno+"'";
        Command1.CommandType = 1;
        Command1.CommandTimeout = 0;
        Command1.Prepared = true;
        Command1.Execute();   
		Response.Write("<script language='javascript'>window.alert('修改成功'); history.go(-1);</script>")
		}   
rs.Close();
   }
%>