bbs_admin.asp

安全性好,适用于制作论坛和进行资源下载的个人和大型网站使用!

sub edit_bbs_send()
dim editbid
editbid=request.querystring("id")
if not IsNumeric(editbid) or editbid="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
editbid=clng(editbid)
end if
dim bbscss,Grade,bbsid
bbscss=request.form("css")
Grade=request.form("Grade")
bbsid=request.form("hx66_bbsid")
hx66_ziduan=request.form("ziduan")
if not IsNumeric(bbscss) or bbscss="" then
   Response.write "<script language=JavaScript>alert('样式必须是数字！');history.back()</script>"
   response.end
else
bbscss=clng(bbscss)
end if

if bbscss<0 or bbscss>allbbscss then
   Response.write "<script language=JavaScript>alert('样式不在取值范围内！');history.back()</script>"
   response.end
end if

set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_bbsinfo,hx66_admin where hx66_bbsinfo.id=hx66_admin.hx66_bid and hx66_admin.hx66_bidadmin=1 and hx66_bbsinfo.id="&editbid
rs.open sqlstr,conn,1,3
if not rs.eof then
rs("hx66_bbstitle")=htmlencode(restr(request.form("title")))
rs("hx66_bbsskin")=bbscss
rs("hx66_name")=htmlencode(restr(request.form("admin")))
rs("hx66_bbsdis")=htmlencode(restr(request.form("dis")))
rs("hx66_Grade")=Grade
rs("hx66_bbsid")=bbsid
rs("hx66_ziduan")=hx66_ziduan
if request.form("opcl")="1" then
rs("hx66_bbsopcl")=1
else
rs("hx66_bbsopcl")=0
end if
rs.update
rs.close
set rs=nothing
response.write "<script language=JavaScript>alert('修改成功！');window.location.href = '?type=1'</script>"
else
   Response.write "<script language=JavaScript>alert('未找到指定的版面！');history.back()</script>"
   response.end
end if
end sub

sub del_bbs()
dim delbid
delbid=request.querystring("id")
if not IsNumeric(delbid) or delbid="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
delbid=clng(delbid)
end if
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_bbsinfo,hx66_admin where hx66_bbsinfo.id=hx66_admin.hx66_bid and hx66_admin.hx66_bidadmin=1 and hx66_bbsinfo.id="&delbid
rs.open sqlstr,conn,1,3
if not rs.eof then
if request.querystring("yn")=""then
%>
<script language="javascript">
if(confirm("确认删除[<%=rs("hx66_bbstitle")%>]吗?"))
window.location="?act=del_bbs&id=<%=delbid%>&yn=1"
else
history.back()
</script>
<%
else
rs.delete
rs.close
set rs=nothing
response.write "<script language=JavaScript>alert('删除成功！');window.location.href = '?type=1'</script>"
end if
else
   Response.write "<script language=JavaScript>alert('未找到指定的版面！');history.back()</script>"
   response.end
end if
end sub

sub managebbs()
dim icount,id,hx66_order
set rs=server.CreateObject("adodb.recordset")
for icount=0 to 40
if not request.form("sel_"&icount)="" then
if not IsNumeric(request.form("sel_"&icount)) then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
id=request.form("sel_"&icount)
hx66_order=request.form("hx66_"&icount)
end if
sqlstr="select * from hx66_bbsinfo where id="&id
rs.open sqlstr,conn,1,3
if not rs.eof then
   if request("hx66_action")="切换关闭属性" then
      if rs("hx66_bbsopcl")=0 then
         rs("hx66_bbsopcl")=1
         rs.update
      else
         rs("hx66_bbsopcl")=0
         rs.update
      end if
   elseif request("hx66_action")="更新排列次序" then
      rs("hx66_order")=hx66_order
      rs.update
   end if
end if
rs.close
end if
next
set rs=nothing
response.redirect "?type=1&bid="&bid
response.end
end sub

sub add_diary() '--------------------新增公告
dim newdiary:newdiary=htmlencode(restr(request.form("diary")))
if newdiary="" then
   Response.write "<script language=JavaScript>alert('新增公告不能为空！');history.back()</script>"
   response.end
end if
dim temp1
temp1="|"
temp1=temp1&""&newdiary&"&nbsp;["&date()&"]"&diary
conn.execute"Update hx66_bbsset set hx66_diary='"&temp1&"'"
set conn=nothing
response.write "<script language=JavaScript>alert('成功新增一条公告！');window.location.href ='?type=5'</script>"
end sub

sub del_diary() '--------------------删除公告
dim i
dim temp
dim temp_diary
dim diary_id
diary_id=request("diary_id")
temp=split(diary,"|")
for i = 1 to ubound(temp)
if int(i)=int(diary_id) then
temp_diary=temp_diary
else
temp_diary=temp_diary&"|"&temp(i)
end if
next
conn.execute "Update hx66_bbsset set hx66_diary='"&temp_diary&"'"
set temp=nothing
set temp_diary=nothing
response.write "<script language=JavaScript>alert('此条公告删除成功！');window.location.href = '?type=5'</script>"
end sub

sub managebbssetsend()
dim lbid:lbid=request.form("delbbsidinfo")
dim lday:lday=request.form("delbbsdayinfo")
dim lcss:lcss=request.form("css")
dim lnum:lnum=request.form("num")
dim lshowset:lshowset=request.form("showset")
dim lpos:lpos=request.form("hx66_points")
dim lmoy:lmoy=request.form("hx66_money")
dim lzpos:lzpos=request.form("hx66_ztpoints")
dim lhpos:lhpos=request.form("hx66_hfpoints")
dim ltpos:ltpos=request.form("hx66_tpoints")
dim ljpos:ljpos=request.form("hx66_jpoints")
dim lskin:lskin=request.form("hx66_bbsskin")
dim lskins:lskins=request.form("hx66_skins")
dim lvote:lvote=request.form("hx66_vote")
for i=1 to 2
dim hx66_upload:hx66_upload=hx66_upload&"|"&Replace(Request.Form("hx66_"&i&""),"|","│")
next
hx66_upload=Replace(Request.Form("hx66_0"),"|","│")&hx66_upload
hx66_upload=Replace(hx66_upload,"'","")
dim uploadtype:uploadtype=Replace(Request.Form("uploadtype"),"'","''")

if not IsNumeric(lbid) or lbid="" then
   Response.write "<script language=JavaScript>alert('自动删除条件一必须是数字！');history.back()</script>"
   response.end
else
lbid=clng(lbid)
end if

if not IsNumeric(lday) or lday="" then
   Response.write "<script language=JavaScript>alert('自动删除条件二必须是数字！');history.back()</script>"
   response.end
else
lday=clng(lday)
end if

if not IsNumeric(lcss) or lcss="" then
   Response.write "<script language=JavaScript>alert('样式种类必须是数字！');history.back()</script>"
   response.end
else
lcss=clng(lcss)
end if

if not IsNumeric(lnum) or lnum="" then
   Response.write "<script language=JavaScript>alert('显示帖数必须是数字！');history.back()</script>"
   response.end
else
lnum=clng(lnum)
end if

if not IsNumeric(lshowset) or lshowset="" then
   Response.write "<script language=JavaScript>alert('编辑器规则必须为数字！');history.back()</script>"
   response.end
else
lshowset=clng(lshowset)
end if

if not IsNumeric(lzpos) or lzpos="" then
   Response.write "<script language=JavaScript>alert('主题积分必须为数字！');history.back()</script>"
   response.end
else
lzpos=clng(lzpos)
end if

if not IsNumeric(lhpos) or lhpos="" then
   Response.write "<script language=JavaScript>alert('回贴积分必须为数字！');history.back()</script>"
   response.end
else
lhpos=clng(lhpos)
end if

if not IsNumeric(lpos) or lpos="" then
   Response.write "<script language=JavaScript>alert('最低积分值必须为数字！');history.back()</script>"
   response.end
else
lpos=clng(lpos)
end if

if not IsNumeric(lmoy) or lmoy="" then
   Response.write "<script language=JavaScript>alert('积分比例必须为数字！');history.back()</script>"
   response.end
else
lmoy=clng(lmoy)
end if

if not IsNumeric(ltpos) or ltpos="" then
   Response.write "<script language=JavaScript>alert('固顶贴积分必须为数字！');history.back()</script>"
   response.end
else
ltpos=clng(ltpos)
end if

if not IsNumeric(ljpos) or ljpos="" then
   Response.write "<script language=JavaScript>alert('精华贴积分必须为数字！');history.back()</script>"
   response.end
else
ljpos=clng(ljpos)
end if

if not IsNumeric(lskin) or lskin="" then
   Response.write "<script language=JavaScript>alert('默认风格编号必须为数字！');history.back()</script>"
   response.end
else
lskin=clng(lskin)
end if

if not IsNumeric(lvote) or lvote="" then
   Response.write "<script language=JavaScript>alert('投票选项必须为数字！');history.back()</script>"
   response.end
else
lvote=clng(lvote)
end if

set rs=server.CreateObject("adodb.recordset")
sqlstr="select top 1 * from hx66_bbsset"
rs.open sqlstr,conn,1,3
if not rs.eof then
rs("hx66_bbsname")=htmlencode(restr(request.form("name")))
'rs("hx66_diary")=htmlencode(restr(request.form("diary")))
rs("hx66_delbbsidinfo")=lbid
rs("hx66_delbbsdayinfo")=lday
rs("hx66_perpagenum")=lnum
rs("hx66_bbscss")=lcss
if request.form("useubase")="1" then
rs("hx66_useubase")=1
else
rs("hx66_useubase")=0
end if
rs("hx66_showset")=lshowset
rs("hx66_points")=lpos
rs("hx66_money")=lmoy
rs("hx66_ztpoints")=lzpos
rs("hx66_hfpoints")=lhpos
rs("hx66_tpoints")=ltpos
rs("hx66_jpoints")=ljpos
rs("hx66_bbsskin")=lskin
rs("hx66_skins")=lskins
rs("hx66_vote")=lvote
rs("hx66_upload")=hx66_upload
rs("hx66_uploadtype")=uploadtype
rs.update
else
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
end if
rs.close
set rs=nothing
response.write "<script language=JavaScript>alert('论坛参数设置成功！');window.location.href = '?type=3'</script>"
end sub

sub bbs_admin_bzhu()
bid=clng(request("bid"))
%>
<form method="post" action="?bid=<%=bid%>&act=managebzhu">
  <tr class=Hxcmsss>
    <td>版主管理</td>              
  </tr>
  <tr class=Hxcmsds>
    <td height="25">&nbsp;新增版主：</td>
  </tr>
  <tr class=Hxcmsds>
    <td height="25">&nbsp;<input type="text" name="admin" size="20" class="input"> <input type="submit" name="submit_1" value="添加版主"></td>                                                                            </tr>
  <tr class=Hxcmsds>
    <td height="25">&nbsp;删除版主：</td>
  </tr>
  <tr class=Hxcmsds>
    <td height="25">&nbsp;<select name="delbzhu" size="1">
    <%
    set rs=server.CreateObject("adodb.recordset")
    sqlstr="select * from hx66_admin where hx66_bid="&bid&" and hx66_bidadmin=0"
    rs.open sqlstr,conn,1,1
    do while not rs.eof
    %>
    <option value="<%=rs("aid")%>"><%=rs("hx66_name")%></option>
    <%
    rs.movenext
    loop
    rs.close
    set rs=nothing
    %>
    </select> <input type="submit" name="submit_2" value="删除该版主"></td>                                                     </tr>
</form>
<%
end sub

sub bbs_admin_bzhu_send()
bid=clng(request("bid"))
if request.form("submit_1")<>"" then
if trim(request.form("admin"))="" then
   Response.write "<script language=JavaScript>alert('没有输入指定的用户名！');history.back()</script>"
   response.end
else
dim bzhuname
bzhuname=restr(trim(request.form("admin")))
set rs=server.CreateObject("adodb.recordset")
sqlstr="select * from hx66_admin where hx66_bid="&bid
rs.open sqlstr,conn,1,3
if rs.recordcount>=8 then
   Response.write "<script language=JavaScript>alert('每个版面至多8个版主！');history.back()</script>"
   response.end
else
   rs.addnew
   rs("hx66_name")=htmlencode(bzhuname)
   rs("hx66_bid")=bid
   rs("hx66_bidadmin")=0
   rs.update
   rs.close
   set rs=nothing
   response.write "<script language=JavaScript>alert('论坛版主添加成功！');window.location.href = '?type=1'</script>"
end if
end if
end if
if request.form("submit_2")<>"" then
if not IsNumeric(request.form("delbzhu")) or request.form("delbzhu")="" then
   Response.write "<script language=JavaScript>alert('非法操作！');history.back()</script>"
   response.end
else
   set rs=server.CreateObject("adodb.recordset")
   sqlstr="select * from hx66_admin where hx66_bid="&bid&" and aid="&clng(request.form("delbzhu"))
   rs.open sqlstr,conn,1,3
   if not rs.eof then
      rs.delete
   else
      Response.write "<script language=JavaScript>alert('没有找到指定的版主！');history.back()</script>"
      response.end
   end if
   rs.close
   set rs=nothing
   response.write "<script language=JavaScript>alert('论坛版主删除成功！');window.location.href = '?type=1'</script>"
end if
end if
end sub
%>