adminadd.asp

来自「SK信息采集2.0功能介绍: 1.可针对任何静态网页,动态网页进行采集。包括h」· ASP 代码 · 共 418 行 · 第 1/2 页

		Response.Write "            <td height=""25"" align=""center"">联系电话</td>"
		Response.Write "            <td height=""25""><input name=""TelPhone"" type=""text"" class=""textbox"" value=""" & TelPhone & """ id=""TelPhone"" size=""30""></td>"
		Response.Write "          </tr>"
		Response.Write "          <tr>"
		Response.Write "            <td height=""25"" align=""center"">电子信箱</td>"
		Response.Write "            <td height=""25""><input name=""Email"" type=""text"" class=""textbox"" id=""Email"" value=""" & Email & """ size=""30""></td>"
		Response.Write "          </tr>"
		Response.Write "          <tr>"
		Response.Write "            <td height=""25"" align=""center"">"
		Response.Write "              <div align=""center"">简要说明</div></td>"
		Response.Write "            <td height=""25"">"
		Response.Write "              <textarea name=""Description"" rows=""6"" id=""Description"" style=""width:80%;border-style: solid; border-width: 1"">" & Descript & "</textarea></td>"
		Response.Write "          </tr>"
		Response.Write "        </table>"
		Response.Write "          </FIELDSET>"
		Response.Write "       </td>"
		Response.Write "    </tr>"
		Response.Write "    </table>"
		Response.Write "  <table width=""100%"" height=""30"" border=""0"" cellpadding=""0"" cellspacing=""0"">"
		Response.Write "    <tr>"
		Response.Write "      <td height=""40"" align=""center"">"
		Response.Write "        <input type=""button"" name=""Submit"" Onclick=""CheckForm()"" value="" 确 定 "">"
		Response.Write "        <input type=""button"" name=""Submit2"" onclick=""window.close()"" value="" 取 消 "">"
		Response.Write "      </td>"
		Response.Write "    </tr>"
		Response.Write "  </table>"
		Response.Write "  </form>"
		Response.Write "</body>"
		Response.Write "</html>"
		Response.Write "<Script Language=""javascript"">" & vbCrLf
		Response.Write "<!--" & vbCrLf
		Response.Write "function CheckForm()" & vbCrLf
		Response.Write "{ var form=document.AdminForm;" & vbCrLf
		Response.Write "   if (form.UserName.value=='')" & vbCrLf
		Response.Write "    {"
		Response.Write "     alert(""请输入管理员名称!"");"
		Response.Write "     form.UserName.focus();"
		Response.Write "     return false;" & vbCrLf
		Response.Write "    }" & vbCrLf
			
			If Action <> "EditAdmin" Then
		Response.Write "   if (form.PrUserName.value=='')" & vbCrLf
		Response.Write "    {"
		Response.Write "     alert(""请输入前台注册用户名称!"");"
		Response.Write "     form.PrUserName.focus();"
		Response.Write "     return false;" & vbCrLf
		Response.Write "    }" & vbCrLf

		Response.Write "    if (form.PassWord.value=='')"
		Response.Write "    {"
		Response.Write "     alert(""请输入初始密码!"");"
		Response.Write "     form.PassWord.focus();"
		Response.Write "     return false;"
		Response.Write "    }"
		Response.Write "   else if (form.PassWord.value.length<6)"
		Response.Write "    {"
		Response.Write "      alert(""初始密码不能少于6位!"");"
		Response.Write "     form.PassWord.focus();"
		Response.Write "     return false;"
		Response.Write "    }"
		Response.Write "   if (form.ConPassWord.value=='')"
		Response.Write "    {"
		Response.Write "     alert(""请输入确定密码!"");"
		Response.Write "     form.ConPassWord.focus();"
		Response.Write "     return false;"
		Response.Write "    }"
		Response.Write "   else if(form.ConPassWord.value.length<6)"
		Response.Write "    {"
		Response.Write "     alert(""确定密码不能少于6位!"");"
		Response.Write "     form.ConPassWord.focus();"
		Response.Write "     return false;"
		Response.Write "    }"
		Response.Write "   if (form.PassWord.value!=form.ConPassWord.value)"
		Response.Write "    {"
		Response.Write "     alert(""两次输入的密码不一致!"");"
		Response.Write "     form.PassWord.focus();"
		Response.Write "     return false;"
		Response.Write "    }"
		
			End If
			
		Response.Write "   if (form.RealName.value=='')" & vbCrLf
		Response.Write "    {" & vbCrLf
		Response.Write "     alert(""请输入真实姓名"");" & vbCrLf
		Response.Write "     form.RealName.focus();" & vbCrLf
		Response.Write "     return false;" & vbCrLf
		Response.Write "    }" & vbCrLf
		Response.Write "   if (form.Email.value!='')" & vbCrLf
		Response.Write "   if(is_email(form.Email.value)==false)" & vbCrLf
		Response.Write "      { alert('非法电子邮箱!');" & vbCrLf
		Response.Write "        form.Email.focus();" & vbCrLf
		Response.Write "        return false;" & vbCrLf
		Response.Write "     }"
		Response.Write "    form.submit();" & vbCrLf
		Response.Write "    return true;" & vbCrLf
		Response.Write "}" & vbCrLf
		Response.Write "//-->" & vbCrLf
		Response.Write "</Script>"
		End Sub
		
		Sub AdminSave()
			Dim AdminID, GroupID, UserName,PrUserName, PassWord, ConPassWord, Locked, RealName, Sex, TelPhone, Email, Descript, TrueIP
			Dim TempObj, AdminRS, AdminSql,ComeUrl
			ComeUrl=Request.ServerVariables("HTTP_REFERER")
			AdminID = KSCMS.G("AdminID")
			
			UserName = KSCMS.ReplaceBadChar(KSCMS.G("UserName"))
			PrUserName=KSCMS.ReplaceBadChar(KSCMS.G("PrUserName"))
			GroupID = KSCMS.G("GroupID")
			PassWord = KSCMS.G("PassWord")
			ConPassWord = KSCMS.G("ConPassWord")
			
			If Trim(PassWord) <> Trim(ConPassWord) Then
						Call KSCMS.AlertHistory("密码不一致!!!", -1)
						Set KSCMS = Nothing
						Response.End
			End If
			IF PrUserName="" Then Call KSCMS.Alert("前台注册用户名必须填写!",ComeUrl)
			
			PassWord = KSCMS.MD5(KSCMS.ReplaceBadChar(PassWord), 16)
			Locked = KSCMS.G("Locked")
			RealName = KSCMS.ReplaceBadChar(KSCMS.G("RealName"))
			Sex = KSCMS.G("Sex")
			TelPhone = KSCMS.ReplaceBadChar(KSCMS.G("TelPhone"))
			Email = KSCMS.ReplaceBadChar(KSCMS.G("Email"))
			Descript = KSCMS.ReplaceBadChar(KSCMS.G("Description"))
			TrueIP = Trim(Request.ServerVariables("HTTP_X_FORWARDED_FOR"))
			If TrueIP = "" Then TrueIP = Request.ServerVariables("REMOTE_ADDR")
			If UserName <> "" Then
					If Len(UserName) >= 100 Then
						Call KSCMS.AlertHistory("管理员名称不能超过50个字符!", -1)
						Set KSCMS = Nothing
						Response.End
					End If
			 Else
					Call KSCMS.AlertHistory("请输入管理员名称!", -1)
					Set KSCMS = Nothing
					Response.End
			 End If
			   
			If Request("Action") = "AddAdmin" Then
					Set TempObj = Conn.Execute("Select UserName from [KS_Admin] where UserName='" & UserName & "'")
					If Not TempObj.EOF Then
						Call KSCMS.Alert("数据库中已存在该管理员名称!", "AdminAdd.asp")
						 Set KSCMS = Nothing
						Response.End
					End If
					Set TempObj = Conn.Execute("Select UserName from [KS_User] where UserName='" & PrUserName & "'")
					If TempObj.BOf And TempObj.EOF Then
						Call KSCMS.Alert("找不到此前台注册用户!", ComeUrl)
						 Set KSCMS = Nothing:Response.End
					End If
					IF Conn.Execute("Select Count(adminid) From KS_Admin Where PrUserName='" & PrUserName & "'")(0)>=1 Then
						Call KSCMS.Alert("您填写的前台注册用户已经是管理员了，不能再添加!", ComeUrl)
						 Set KSCMS = Nothing:Response.End
					End IF
				  Set AdminRS = Server.CreateObject("adodb.recordset")
				  AdminSql = "select * from [KS_Admin] Where (AdminID IS NULL)"
				  AdminRS.Open AdminSql, Conn, 1, 3
				  AdminRS.AddNew
				  AdminRS("AddDate") = Now
				  AdminRS("UserName") = UserName
				  AdminRS("PrUserName")=PrUserName
				  AdminRS("GroupID") = GroupID
				  AdminRS("PassWord") = PassWord
				  AdminRS("Locked") = Locked
				  AdminRS("RealName") = RealName
				  AdminRS("Sex") = Sex
				  AdminRS("TelPhone") = TelPhone
				  AdminRS("Email") = Email
				  AdminRS("Description") = Descript
				  AdminRS("SuperTF") = 0
				  AdminRS("LastLoginIP") = TrueIP
				  AdminRS("LastLoginTime") = Now
				  AdminRS("LastLogOutTime") = Now
				  AdminRS("LoginTimes") = 0
				  AdminRS.Update
				  AdminRS.Close:Set AdminRS = Nothing
				  
				  '更新前台用户，使之加入管理员组
				  Conn.Execute("Update KS_User Set GroupID=4 Where UserName='" & PrUserName & "'")
				  
				  Response.Write ("<script>if (confirm('添加管理员成功,继续添加吗?')) {location.href='AdminAdd.asp?GroupID=" & GroupID & "';} else { window.close();}</script>")
			ElseIf Request("Action") = "EditAdmin" Then
					Set TempObj = Conn.Execute("Select UserName from [KS_Admin] where AdminID<>" & AdminID & " And UserName='" & UserName & "'")
					If Not TempObj.EOF Then
						Call KSCMS.Alert("数据库中已存在该管理员名称!", "AdminAdd.asp?AdminID=" & AdminID & "&Action=EditAdmin")
						 Set KSCMS = Nothing
						Response.End
					End If
				  Set AdminRS = Server.CreateObject("adodb.recordset")
				  AdminSql = "select * from [KS_Admin] Where AdminID=" & AdminID
				  AdminRS.Open AdminSql, Conn, 1, 3
				  AdminRS("UserName") = UserName
				  AdminRS("GroupID") = GroupID
				  AdminRS("Locked") = Locked
				  AdminRS("RealName") = RealName
				  AdminRS("Sex") = Sex
				  AdminRS("TelPhone") = TelPhone
				  AdminRS("Email") = Email
				  AdminRS("Description") = Descript
				  AdminRS.Update
				  AdminRS.Close
				  Set AdminRS = Nothing
				  Response.Write ("<script>alert('修改管理员成功!');window.close();</script>")
			End If
		End Sub
End Class
%>