bbs_admin.asp

安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!

<%
sub bbs_admin()
%>
  <tr class=Hxcmsss>
    <td colspan="5">论坛管理员管理</td>             
  </tr>
  <tr class=Hxcmsds align="center">
          <td width="10%" height="25">编号</td>
          <td width="50%">ID名称</td>
          <td width="20%">等级</td>
          <td width="10%">编辑</td>
          <td width="10%">删除</td>
  </tr>
<%
dim sql,tb,datenum,pagenum,url,tbdate
sql="select * from hx66_admin where hx66_djadmin<>0 order by aid asc"
set tbdate=server.createobject("adodb.recordset")
tbdate.open sql,conn,1,1
do while not tbdate.eof
%>
  <tr class=Hxcmsds align="center">
          <td><%=tbdate("aid")%></td>
          <td align="left"><%=tbdate("hx66_name")%></td>
          <td><%if tbdate("hx66_djadmin")=99 then%><font color=red>超级管理员</font><%else%>普通管理员<%end if%></td>
          <td><a href="?type=edit_admin&id=<%=tbdate("aid")%>">编辑</a></td>
          <td><a href="?act=del_admin&id=<%=tbdate("aid")%>">删除</a></td>
  </tr>
<%
tbdate.movenext
loop
tbdate.close
set tbdate=nothing
%>
<form method="post" action="?act=add_admin">
  <tr class=Hxcmsss>
          <td colspan="5">≡ 添加新的管理员 ≡</td>
  </tr>
  <tr class=Hxcmsqs>
          <td height="25" colspan="5">&nbsp;管理员名称:<input type="text" name="title" maxlength="12" class="input">&nbsp;&nbsp;<input type="radio" name="djadmin" value="9" checked>普通管理员&nbsp;<input type="radio" name="djadmin" value="99">超级管理员&nbsp;&nbsp;<input type="submit" name="submit" value="确认添加" class="button"></td>
  </tr>
  <tr class=Hxcmsds>
          <td height="25" colspan="5"><BR>友情提示：<BR>1、超级管理员和普通管理员权限一样，只是有不同的头衔。主要权限：拥有超级版主的所有权限外，可以在前台全论坛管理。<BR>2、超级版主权限：除拥有版主权限外，具有增加删除本版版主的权限。<BR>3、版主权限：拥有管理本版的贴子、回收站、黑名单等权限。<BR>4、自已的ID重新改名，需用新ID重新登陆才能管理，请慎用。</td>
  </tr>
</form>
<%
end sub

sub add_admin()
dim title,djadmin
title=htmlencode(restr(request.form("title")))
djadmin=Clng(request.form("djadmin"))
if title="" then
   Response.write "<script language=JavaScript>alert('名称不能为空！');history.back()</script>"
   response.end
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_admin"
rs.open sqlstr,conn,1,3
rs.addnew()
rs("hx66_name")=title
rs("hx66_djadmin")=djadmin
rs.update
rs.close
set rs=nothing
response.write "<script language=JavaScript>alert('管理员添加成功！');window.location.href = '?type=2'</script>"
response.end
end sub

sub edit_admin()
dim editbid
editbid=request.querystring("id")
if not IsNumeric(editbid) or editbid="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
editbid=clng(editbid)
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_admin where aid="&editbid
rs.open sqlstr,conn,1,1
if not rs.eof then
%>
<form method="post" action="?act=edit_admin_send&id=<%=editbid%>">
<tr class=Hxcmsss>
    <td>管理员信息修改</td>         
</tr>
  <tr class=Hxcmsqs>
    <td height="25">&nbsp;管理员名称：<input type="text" name="title" maxlength="12" value="<%=rs("hx66_name")%>" class="input">&nbsp;&nbsp;<input type="radio" name="djadmin" value="9" <%if rs("hx66_djadmin")=9 then%>checked<%end if%>>普通管理员&nbsp;<input type="radio" name="djadmin" value="99" <%if rs("hx66_djadmin")=99 then%>checked<%end if%>>超级管理员&nbsp;&nbsp;<input type="submit" name="submit" value="确认修改" class="button"></td>
        </tr>
</form>
<%
else
   Response.write "<script language=JavaScript>alert('未找到指定的管理员！');history.back()</script>"
   response.end
end if
rs.close
set rs=nothing
end sub

sub edit_admin_send()
dim editbid
editbid=request.querystring("id")
if not IsNumeric(editbid) or editbid="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
editbid=clng(editbid)
end if
dim title,djadmin
title=htmlencode(restr(request.form("title")))
djadmin=Clng(request.form("djadmin"))
if title="" then
   Response.write "<script language=JavaScript>alert('管理员名称不能为空！');history.back()</script>"
   response.end
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_admin where aid="&editbid
rs.open sqlstr,conn,1,3
if not rs.eof then
rs("hx66_name")=title
rs("hx66_djadmin")=djadmin
rs.update
rs.close
set rs=nothing
response.write "<script language=JavaScript>alert('管理员修改成功！');window.location.href = '?type=2'</script>"
else
   Response.write "<script language=JavaScript>alert('未找到指定的管理员！');history.back()</script>"
   response.end
end if
end sub

sub del_admin()
dim delbid
delbid=request.querystring("id")
if not IsNumeric(delbid) or delbid="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
delbid=clng(delbid)
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_admin where aid="&delbid
rs.open sqlstr,conn,1,3
if not rs.eof then
if request.querystring("yn")=""then
%>
<script language="javascript">
if(confirm("确认删除[<%=rs("hx66_name")%>]吗?"))window.location="?act=del_admin&id=<%=delbid%>&yn=1"
else
history.back()
</script>
<%
else
rs.delete
rs.close
set rs=nothing
%>
<script language="javascript">alert("管理员删除成功！")history.go(-2)</script>
<%
end if
else
   Response.write "<script language=JavaScript>alert('未找到指定的管理员！');history.back()</script>"
   response.end
end if
end sub

sub diary1()
%>
<form method="post" action="?act=add_diary">
  <tr class=Hxcmsss>
    <td colspan="3">论坛公告管理</td>           </tr>
  <tr class=Hxcmsds>
         <td width="10%" height="25" align="center">编号</td>
         <td width="80%" height="25" align="center">公告</td>
         <td width="10%" height="25" align="center">删除</td>
        </tr>
<%
temp=split(diary,"|")
for i = 1 to ubound(temp)%>
<tr>
<td width="10%" height="25" align="center"><%=i%></td>
<td width="80%" height="25" align="left">&nbsp;&nbsp;&nbsp;&nbsp;<%=temp(i)%></td>
<td width="10%" height="25" align="center"><a href="?act=del_diary&diary_id=<%=i%>"><font color="#CC0000">[删除]</font></a></td></tr>
<%next%>
  <tr class=Hxcmsds>
    <td height="25" colspan="3"><font color=red>·</font>添加新公告：
        <textarea rows="6" name="diary" cols="70" class="input"></textarea></td>
        </tr>
        <tr class=Hxcmsqs>
          <td colspan="3" height="25" align="center"><input type="submit" name="submit" value="确认新增" class="button"></td>
        </tr> </form>         
  <%
end sub


sub upload()
%>
<form method="post" action="uploaddel.asp">
<tr class=Hxcmsss>
    <td colspan="6">上传文件管理</td>          
</tr>
  <tr class=Hxcmsqs align="center">
          <td width="5%" height="25">选定</td>
          <td width="5%">编号</td>
          <td width="25%">文件名</td>
          <td width="20%">上传时间</td>
          <td width="20%">上传人</td>
          <td width="25%">相关主题</td>
        </tr>
<%
Dim CurPage,Url_Add
Url_Add="?type=4&"
If Request.QueryString("Page")<>"" Then
   Curpage=Request.QueryString("Page")
   If IsInteger(Curpage)=False OR Curpage<0 Then Curpage=1
Else
   Curpage=1
End If
set tbdate=server.createobject("adodb.recordset")
sql="select * from [upload] order by id desc"
tbdate.open sql,conn,1,1
   Dim bbs_Nums,MultiPages,j
   bbsperpage=15
   tbdate.PageSize=bbsperpage
   tbdate.AbsolutePage=CurPage
   bbs_Nums=tbdate.RecordCount
   MultiPages="<tr><td class=Hxcmsqs colspan=""6"" align=""center"">共有上传文件："&bbs_Nums&"个。&nbsp;&nbsp;"&MultiPage(bbs_Nums,bbsperpage,CurPage,Url_Add)&"</td></tr>"
Do Until tbdate.EOF OR j=bbsperpage
%>
        <tr class=Hxcmsds>
          <td height="25" align="center"><input type="CheckBox" value="<%=tbdate("filename")%>" name="dfiles"></td>
          <td align="center"><%=tbdate("id")%></td>
          <td align="left">&nbsp;<a href="upload/<%=tbdate("filename")%>" target='_blank' Title="点击查看此文件"><%=tbdate("filename")%></A></td>
          <td align="left">&nbsp;<%=tbdate("uploadtime")%></td>
          <td align="center"><%=tbdate("name")%></td>
          <td align="center"><a href="bbs_detail.asp?bid=<%=tbdate("totable")%>&aid=<%=tbdate("bbsid")%>" target='_blank' Title="点击查看此主题"><%=left(tbdate("url"),12)%></a></td>
        </tr>
<%
j=j+1
tbdate.movenext
loop
tbdate.close
set tbdate=nothing
Response.Write(MultiPages)
%>
        <tr class=Hxcmsds>
          <td width="100%" height="25" align="left" colspan="6">&nbsp;<INPUT type=submit value="删除选中的文件" name=Submit>
<input type="hidden" name="action1" value="del"><input type="hidden" name="dir" value="upload"></td></form>
        </tr>
<%
end sub

sub bbs_admin_set_bbsid()
%>
<form method="post" action="?act=managebbsid">
  <tr class=Hxcmsss>
    <td colspan="5">区版块管理</td>             
 </tr>
        <tr class=Hxcmsds>
          <td width="10%" height="26" align="center">选定</td>
          <td width="10%">排序</td>
          <td width="60%">版块名称</td>
          <td width="10%">编辑</td>
          <td width="10%">删除</td>
        </tr>
<%
dim sql,tb,datenum,pagenum,url,tbdate
sql="select * from hx66_bbsid order by hx66_order asc"
set tbdate=server.createobject("adodb.recordset")
tbdate.open sql,conn,1,1
dim icount
icount=0
do while not tbdate.eof
%>
        <tr class=Hxcmsds>
          <td height="26" align="center"><input type="checkbox" name="sel_<%=icount%>" value="<%=tbdate("id")%>"></td>
          <td><input type="text" name="hx66_<%=icount%>" size="5" value="<%=tbdate("hx66_order")%>" class="input"></td>
          <td><%=tbdate("hx66_title")%></td>
          <td><a href="?type=edit_bbsid&id=<%=tbdate("id")%>">编辑</a></td>
          <td><a href="?act=del_bbsid&id=<%=tbdate("id")%>">删除</a></td>
        </tr>
<%
icount=icount+1
tbdate.movenext
loop
tbdate.close
set tbdate=nothing
%>
        <tr class=Hxcmsds>
          <td colspan="5">
           <input type="submit" value="更新排列次序" name="hx66_action" class="button"></td>
        </tr>
        </form>
        <tr>
          <td height="26" colspan="5"></td>
        </tr>
        <form method="post" action="?act=add_bbsid">
        <tr class=Hxcmsss>
          <td colspan="5">≡ 添加新的区版块 ≡</td>
        </tr>
        <tr class=Hxcmsqs>
          <td height="25" colspan="5">&nbsp;版块标题:<input type="text" name="title" maxlength="10" class="input">&nbsp;&nbsp;<input type="submit" name="submit" value="确认添加" class="button"></td>
        </tr>
        </form>
<%
end sub

sub edit_bbsid()
dim editbid
editbid=request.querystring("id")
if not IsNumeric(editbid) or editbid="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
editbid=clng(editbid)
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_bbsid where id="&editbid
rs.open sqlstr,conn,1,3
if not rs.eof then
%>
<form method="post" action="?act=edit_bbsid_send&id=<%=editbid%>">
  <tr class=Hxcmsss>
    <td>论坛区版块信息</td>         
</tr>
  <tr class=Hxcmsds>
          <td height="25">&nbsp;区版块标题：<input type="text" name="title" maxlength="10" value="<%=rs("hx66_title")%>" class="input">&nbsp;&nbsp;<input type="submit" name="submit" value="确认修改" class="button"></td>
        </tr>
</form>
<%
else
   Response.write "<script language=JavaScript>alert('未找到指定的版面！');history.back()</script>"
   response.end
end if
end sub

sub bbs_admin_set_bbs()
%>
<form method="post" action="?act=managebbs">
  <tr class=Hxcmsss>
    <td colspan="11">版块管理</td>               
   </tr>
        <tr class=Hxcmsqs align="center">
          <td width="7%" height="25">选定</td>
          <td width="8%">排序</td>
          <td width="13%">版块名称</td>
          <td width="8%">状态</td>
          <td width="16%">等级|属性</td>
          <td width="8%">版区</td>
          <td width="10%">超级版主</td>
          <td width="10%">版主</td>
          <td width="10%">版主管理</td>
          <td width="5%">编辑</td>
          <td width="5%">删除</td>
        </tr>
<%
dim sql,datenum,pagenum,url,tbdate
sql="select * from hx66_bbsinfo,hx66_admin where hx66_bbsinfo.id=hx66_admin.hx66_bid and hx66_admin.hx66_bidadmin=1 order by hx66_bbsinfo.hx66_bbsid asc,hx66_bbsinfo.hx66_order asc"
set tbdate=server.createobject("adodb.recordset")
tbdate.open sql,conn,1,1
dim icount
icount=0
do while not tbdate.eof
if tbdate("hx66_ziduan")="2" then
   folder1="|(展示版)" 
elseif tbdate("hx66_ziduan")="1" then
   folder1="|(回复版)" 
else
   folder1="|(正常版)"       
end if
if tbdate("hx66_Grade")="2" then
   folder2="( VIP)"
elseif tbdate("hx66_Grade")="1" then
   folder2="(会员)" 
else
   folder2="(游客)"       
end if
%>
        <tr class=Hxcmsds align="center">
          <td height="25"><input type="checkbox" name="sel_<%=icount%>" value="<%=tbdate("id")%>"></td>
          <td><input type="text" name="hx66_<%=icount%>" size="5" value="<%=tbdate("hx66_order")%>" class="input"></td>
          <td><%=tbdate("hx66_bbstitle")%></td>
          <td><%if tbdate("hx66_bbsopcl")=1 then%><font color=red>[关闭]</font><%else%>[正常]<%end if%></td>
          <td><%=folder2&folder1%></td>
          <td><%=tbdate("hx66_bbsid")%></td>
          <td><%=tbdate("hx66_name")%></td>
          <td><select name="" class="input">
<%
sql="select * from hx66_admin where hx66_bidadmin=0 and hx66_bid="&tbdate("id")
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
do while not rs.eof%><option value=""><%=rs("hx66_name")%></option>