admin_news.asp

来自「安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!」· ASP 代码 · 共 909 行 · 第 1/3 页

	  %>
      <table align="center" width="98%" align="center" border="1" cellspacing="0" cellpadding="4" class=Hxcmsbk style="border-collapse: collapse">
        <form name="form1" method="post" action="admin_news.asp">
          <tr> 
            <td class=Hxcmsss>删除新闻分类</font></td>
          </tr>
          <tr> 
            <td class=Hxcmsds>分类名称- <%=rs("cat_name")%></td>
          </tr>
          <tr> 
            <td class=Hxcmsds><%if request.querystring("sid")="0" then%>友情提示：你要删除的是新闻的大分类，此操作将同时删除其下的小类和所有的类下新闻，请慎重！<%else%>友情提示：删除分类，将删除此分类下的所有新闻，请慎重！<%end if%></td>
          </tr>
          <tr> 
            <td class=Hxcmsqs align="center" height="30"> <input name="Submit" type="submit" class="button" id="Submit" value="确定删除">
              [<a href="admin_news.asp">返回</a>] </td>
          </tr>
          <input type="hidden" name="id" value="<%=rs("cat_id")%>">
          <input type="hidden" name="sid" value="<%=clng(request.querystring("sid"))%>">
          <input type="hidden" name="action" value="delnewcat">
          <input type="hidden" name="MM_insert" value="true">
        </form>
      </table>
<%
rs.close
set rs=nothing
end if
end if
'================hx66.com.cn===============
if request.querystring("action")="moves" then
cat1=clng(trim(request("cat1")))
cat2=clng(trim(request("cat2")))
conn.Execute = "update news set cat_id="&cat2&" where cat_id="&cat1&""
set conn=nothing
Response.Redirect "admin_news.asp"
end if
if request.QueryString("action")="checkpass" then
sql="select * from news where news_id="&clng(request.querystring("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs("passed")=0
rs.update
tjuser=rs("tjuser")
rs.close
set rs=nothing
conn.execute ("UPDATE [user] SET points = points + "&fbpoints&" where username='"&tjuser&"'")
response.redirect Request.ServerVariables("http_referer")
end if
if request.form("operation")="DEL" then
    num=request.form("news_id").Count
    for i=1 to num
      conn.execute("delete from [news] where news_id="&request.form("news_id")(i))
    next
end if
if request.QueryString("action")="cat" then
Response.Write("<table align=""center"" width=""98%"" border=""1"" cellspacing=""0"" cellpadding=""4"" class=Hxcmsbk style=""border-collapse: collapse"">")
%>
<tr class=Hxcmsss><form name="form3" method="post" action="">
<td colspan="6">新闻管理</td>
<td colspan="2" align="right" style="padding-top:2px;">
    <select style="margin:-3px" name="go" onChange='window.location=form.go.options[form.go.selectedIndex].value'>
    <option value="">选择显示方式</option>
    <option value="admin_news.asp?action=cat">显示所有新闻</option>
<%
sql="select * from newcat where sid=0"
set rs1=conn.execute(sql)
do while not rs1.eof
response.write "<optgroup label='"&rs1("cat_name")&"'>"
sql="select * from newcat where sid="&rs1("cat_id") 
set rs2=server.createobject("adodb.recordset")
rs2.open sql,conn,1,1
do while not rs2.eof
%>
  <option value="admin_news.asp?action=cat&cat_id=<%=rs2("cat_id")%>">├ <%=rs2("cat_name")%></option>
<%
rs2.movenext
loop
rs1.movenext
loop
rs2.close
set rs2=nothing
rs1.close
set rs1=nothing%>
</select></td>
</tr></form>
<%
Dim CurPage,Url_Add
Url_Add="?action=cat&"
If Request.QueryString("Page")<>"" Then
   Curpage=Request.QueryString("Page")
   If IsInteger(Curpage)=False OR Curpage<0 Then Curpage=1
Else
   Curpage=1
End If
if request.querystring("cat_id")<>"" then
   cat_id=cint(request.querystring("cat_id"))
   sql="select * from news where cat_id="&cat_id&" order by news_id desc"
   Url_Add=Url_Add&"cat_id="&cat_id&"&"
elseif request("keyword")<>""  then
   keyword=trim(replace(request("keyword"),"'",""))
   sea_type=trim(replace(request("sea_type"),"'",""))
   sql_tmp=1
   sql="select * from news where "&request("sea_type")&" like '%"&keyword&"%' order by news_id DESC"
   Url_Add=Url_Add&"sea_type="&sea_type&"&keyword="&keyword&"&"
elseif request.querystring("t")="pass"  then
   sql="select * from news where passed=1 order by news_id DESC"
   Url_Add=Url_Add&"t=pass&"
else
   sql="select * from news where passed=0 order by istop desc,news_id DESC"
end if
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
if rs.eof and rs.bof then
  Response.Write("<tr align=""center""><td class=Hxcmsds colspan=8>当前没有新闻！</td></tr>")
Else
   Dim new_Nums,MultiPages,j
   rs.PageSize=adflperpage
   rs.AbsolutePage=CurPage
   new_Nums=rs.RecordCount
   MultiPages="<tr><td class=Hxcmsqs colspan=""8"" align=""center"">共有新闻："&new_Nums&"篇。&nbsp;&nbsp;"&MultiPage(new_Nums,adflperpage,CurPage,Url_Add)&"</td></tr>"
%>
<form name="form4" method="post" action="admin_news.asp?action=cat">
<tr align="center" class=Hxcmsqs>
<td colspan="8">搜索（新闻列表）关键字：
<input type=text name=keyword size=15 maxlength=20>
<select name=sea_type size=1>
<option value='news_title'>按标题</option>
<option value='tjuser'>按发布人</option>
</select>
<input type=submit value='搜 索'></td>          
</tr></form>
<form name=form method=post action="admin_news.asp?action=cat">
<script language="javascript">
function CheckAll(form)
{
for (var i=0;i<form.elements.length;i++)
{
var e = form.elements[i];
if (e.name != 'chkall')
e.checked = form.chkall.checked;
}
}
</script>
        <tr align="center"> 
          <td class=Hxcmsqs width="5%">选中</td>
          <td class=Hxcmsqs width="5%">审核</td>
          <td class=Hxcmsqs width="43%">新闻标题<%if sql_tmp="1" then response.write "（搜索结果："&keyword&"）"%></td>
          <td class=Hxcmsqs width="8%">分类</td>
          <td class=Hxcmsqs width="10%">发布人</td>
          <td class=Hxcmsqs width="12%">发表时间</td>
          <td class=Hxcmsqs width="5%">评论</td>
          <td class=Hxcmsqs width="12%">操作</td>
        </tr>
<%
Do Until Rs.EOF OR j=adflperpage
sql="select cat_id,cat_name from newcat where cat_id="&rs("cat_id")
set rscat=server.createobject("adodb.recordset")
rscat.open sql,conn,1,1   
if rs("istop")="1" then      
folder="「置顶」"       
else
folder=""       
end if      
%> 
         <tr class=Hxcmsds>
          <td align="center"><input type=checkbox Name=news_id Value=<%=rs("news_id")%>></td>
          <td align="center"><%If Rs("passed")=1 Then%><a href="?id=<%=rs("news_id")%>&action=checkpass"><font color=red>pass</font></a><%else%>√<%End If%></td> 
          <td><a href="shownews.asp?news_id=<%=rs("news_id")%>&cat_id=<%=rs("cat_id")%>" target="_blank"><%=rs("news_title")%></a>&nbsp;<font color="red"><%=folder%></font>&nbsp;<%if rs("isimg")=1 then
Response.Write "<img src='img/img.gif' alt='图片新闻'>" & vbCrLf
end if%></td> 
          <td align="center"><%=rscat("cat_name")%></td>
          <td><%=rs("tjuser")%></td>
          <td><%=formatdatetime(rs("news_date"),2)%></td>
          <td align="center"><font color=red><%=rs("reviewcount")%></font></td>
          <td align="center"> <a href="admin_view.asp?action=news&news_id=<%=rs("news_id")%>">评论</a>&nbsp;&nbsp;
                              <a href="admin_news.asp?news_id=<%=rs("news_id")%>&cat_id=<%=rs("cat_id")%>&action=editnew">编辑</a></td>
        </tr>
<%
j=j+1
rs.movenext
loop
end if
rs.close
set rs=nothing
%>

          <tr><td class=Hxcmsqs colspan="8">
            <input type=hidden value=DEL name=operation>
	 <input type="checkbox" name="chkall" onclick="CheckAll(this.form)" value="ON">选中本页所有 <input type=submit value=批量删除 onClick="return confirm('确定删除选中的新闻吗?');" class="button"> </td>
          </tr></form>
<%
Response.Write(MultiPages)
Response.Write("</table>")
end if

if request.Form("action")="newnew" then
sql="select * from news"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
rs.addnew
dim poster,newfrom,title,keyword,content,catid,newsisbest,newistop,newpic,isimg,newsauthor,newsahome,tjuser,sImgYes
catid=request.form("cat_id")
title=trim(replace(request.form("news_title"),"'",""))
keyword=trim(replace(request.form("news_keyword"),"'",""))
content=rtrim(replace(request.form("news_content"),"",""))
content=trim(replace(request.form("news_content"),"∈",""))
color=trim(replace(request.form("news_color"),"'",""))
rs("news_color")=color
newsisbest=request.form("isbest")
newistop=request.form("istop")
newpic=request.form("images")
isimg=request.form("hx66")
newsauthor=trim(replace(request.form("news_author"),"'",""))
newsahome=trim(replace(request.form("news_ahome"),"'",""))
tjuser=trim(replace(request.form("tjuser"),"'",""))
sImgYes=request.form("hx6666")
if not isInteger(catid) then
  Response.Write("<script language=javascript>alert('你必须选择新闻的分类！');history.back(1);</script>")
  response.end
end if
if title="" then
  Response.Write("<script language=javascript>alert('你必须填写新闻的标题！');history.back(1);</script>")
  response.end
end if
if newsauthor="" or newsahome="" then
  Response.Write("<script language=javascript>alert('新闻作者和新闻来源不能为空！');history.back(1);</script>")
  response.end
end if
if keyword="" then
  Response.Write("<script language=javascript>alert('你必须填写新闻的关键字！');history.back(1);</script>")
  response.end
end if
if content="" then
  Response.Write("<script language=javascript>alert('你必须填写新闻的内容！');history.back(1);</script>")
  response.end
end if
  rs("cat_id")=catid
  rs("news_title")=title
  rs("news_author")=newsauthor
  rs("news_ahome")=newsahome
  rs("news_keyword")=keyword
  rs("news_content")=content
if cint(newsisbest)=1 then
  rs("isbest")=cint(newsisbest)
end if
if cint(newistop)=1 then
  rs("istop")=cint(newistop)
end if
if cint(isimg)=1 then
  rs("isimg")=cint(isimg)
  rs("images")=newpic
  rs("imgyes")=cint(sImgYes)
end if
  rs("tjuser")=tjuser
  rs.update
  rs.close
  set rs=nothing
  sql="update allcount set newscount = newscount + 1"
  conn.execute(sql)
  response.redirect "admin_news.asp?action=cat"
end if
if request.Form("action")="editnew" then
if request.Form("id")="" then
  Response.Write("<script language=javascript>alert('你必须指定操作的对象！');history.back(1);</script>")
  response.End
else
  if not isInteger(request.form("id")) then
  Response.Write("<script language=javascript>alert('非法的新闻id参数。');history.back(1);</script>")
  response.End
  end if
end if
sql="select * from news where news_id="&clng(request.Form("id"))
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
catid=request.form("cat_id")
title=trim(replace(request.form("news_title"),"'",""))
keyword=trim(replace(request.form("news_keyword"),"'",""))
content=rtrim(replace(request.form("news_content"),"",""))
content=trim(replace(request.form("news_content"),"∈",""))
color=trim(replace(request.form("news_color"),"'",""))
rs("news_color")=color
newsisbest=request.form("isbest")
newistop=request.form("istop")
newpic=request.form("images")
isimg=request.form("hx66")
newsauthor=trim(replace(request.form("news_author"),"'",""))
newsahome=trim(replace(request.form("news_ahome"),"'",""))
tjuser=trim(replace(request.form("tjuser"),"'",""))
sImgYes=request.form("hx6666")
if not isInteger(catid) then
  Response.Write("<script language=javascript>alert('你必须选择新闻的分类！');history.back(1);</script>")
  response.End
end if
if title="" then
  Response.Write("<script language=javascript>alert('你必须填写新闻的标题！');history.back(1);</script>")
  response.End
end if
if newsauthor="" or newsahome="" then
  Response.Write("<script language=javascript>alert('新闻作者和新闻来源不能为空！');history.back(1);</script>")
  response.End
end if
if keyword="" then
  Response.Write("<script language=javascript>alert('你必须填写新闻的关键字！');history.back(1);</script>")
  response.End