editnewpic.asp

千年免费电影系统 V3.1版 修正了V3.0版后台无法登陆的问题

<!--#include file="../checkpost.asp"-->
<!--#include file="../MD5/md5.asp" -->
<!--#include file="security.asp"-->
<!--#include file="articleconn.asp"-->
<%if session("flag")>1 then
    response.write "<script>alert('您的操作权限不够！');history.back();</script>"
    response.end
end if
%>
<%
my=request("my")
change=request("change")
delet=request("delet")
addname=request("addname")
cmdok=request("cmdok")
set rs=server.createobject("adodb.recordset")
if my<>"" then
name=Replace(request("name"), "'", "''")
pwd=Replace(request("pwd"), "'", "''")
sql="select * from password where id=1"
rs.open sql,conn,1,3

rs("name")=name
rs("pwd")=md5(pwd)
rs.update
rs.close
end if

if change<>"" then
typena=request("typename")
sql="select * from type where typeid="&Replace(request("typeid"), "'", "''")
rs.open sql,conn,1,3

rs("type")=typena
rs.update
rs.close
end if

if request("changemovie")<>"" then
sql="select * from movie where id="&clng(request("id"))
rs.open sql,conn,1,3
rs("movie")=trim(request("moviev"))
rs("ipsip")=trim(request("ipsipb"))
rs.update
rs.close
end if

if request("addmovieip")<>"" then
sql="select * from movie"
rs.open sql,conn,1,3
rs.addnew
rs("movie")=Replace(request("moviet"), "'", "''")
rs("ipsip")=Replace(request("ipsipt"), "'", "''")
rs.update
rs.close
end if

if delet<>"" then
   conn.execute"delete from type where typeid="&Replace(request("typeid"), "'", "''")
end if

if request("deletserver")<>"" then
   conn.execute"delete from movie where id="&clng(request("id"))
end if

if addname<>"" then
typer=request("type")
rs.open "select * from type",conn,1,3

rs.addnew
rs("type")=typer
rs.update
rs.close
end if

if cmdok<>"" then
   pic1=request("pic1")
   pic2=request("pic2")
   pic3=request("pic3")
   movie1=request("movie1")
   movie2=request("movie2")
   movie3=request("movie3")
   rs.open "select * from newpic",conn,1,3
   
   rs("pic1")=pic1
   rs("pic2")=pic2
   rs("pic3")=pic3
   rs("movie1")=movie1
   rs("movie2")=movie2
   rs("movie3")=movie3
   rs.update
   rs.close
end if

   set rs=nothing
   conn.close
   set conn=nothing
response.redirect Request.ServerVariables("HTTP_REFERER")
%>



</body>
</html>