admin_user.asp

新闻发布系统

	Set rsUser=Server.CreateObject("Adodb.RecordSet")
	sqlUser="select * from admin where userid=" & UserID
	rsUser.Open sqlUser,Conn,1,3
	if rsUser.bof and rsUser.eof then
		FoundErr=True
		ErrMsg=ErrMsg & "<br><li>找不到指定的用户！</li>"
		rsuser.close
		set rsuser=nothing
		exit sub
	end if
%>
<form name="myform" action="Admin_User.asp" method="post">
  <table width="693" border=0 align="center" cellpadding=2 cellspacing=1 bgcolor="#7ED3A7">
    <tr bgcolor="#F7FFF4"> 
      <td height="32" colspan="2" align=middle class=td0> <table width="100%" border="0" cellpadding="0" cellspacing="0" background="images/bg1.gif">
          <tr> 
            <td height="26"> <div align="center"><b>修改用户作息</b></div></td>
          </tr>
        </table>
        
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>用户名称：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
<%=rsuser("username")%>
           </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>您的密码：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
          <input name=userpass type=password id="userpass" size=20 maxlength=12 >
          <font color="#FF3333">*</font> 字母或数字</div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>确认密码：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
          <input name=PwdConfirm type=password size=20  maxlength=12 >
          <font color="#FF3333">*</font> </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>真实姓名：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
          <input name=realname type=text id="realname" value="<%=rsuser("realname")%>" size=20 maxlength=20 >
          <font color="#FF3333">*</font> </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>性 别：</td>
      <td align=middle class=td2> 
        <div align="left"> 
		<INPUT type=radio value="1" name=sex <%if rsUser("sex")=1 then response.write "CHECKED"%>>
          男 　　 
          <INPUT type=radio value="0" name=sex <%if rsUser("sex")=0 then response.write "CHECKED"%>>
          女<font color="#FF3333">*</font></div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>级　别/角色设置：</td>
      <td align=middle class=td2> 
        <div align="left"> 级别：<%=rsuser("level")%>　修改为： 
          <select name="level" id="level" >
            <option value="" selected></option>
            <option value="1">一般会员</option>
            <option value="2">高级会员</option>
            <option value="3">认证会员</option>
            <option value="4">VIP会员</option>
            <option value="5">系统管理员</option>
          </select>
          角色：<%=rsuser("art")%>　修改为： 
          <select name="art">
                        <option value="" selected></option>
						<%
						Dim Rs1
                        Set Rs1=Server.CreateObject("ADODB.RecordSet")
                        Dim Sql
                       Sql="SELECT * From Role Order By ID DESC"
                       Rs1.Open Sql,Conn,1,1
                       while not rs1.eof
                        %>
						 
                        <option value="<%=rs1("title")%>"><%=rs1("title")%></option>
                        <%
                        rs1.movenext
                          wend
                          rs1.close
	                       set rs1=Nothing
                             %>
                      </select>
          
        </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>Oicq：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
        <input type=text name=oicq value="<%=rsuser("oicq")%>" size=15 maxlength=20 >
        </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>邮箱地址：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
           <input name=email value="<%=rsuser("email")%>" type=text id="email" size=30 ><font color="#FF3333">*</font></div>
      </td>
    </tr>
    
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>主页地址：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left"> 
          <input name=homepage value="<%=rsuser("homepage")%>" type=text id="homepage"  size=30 maxlength=50>
        </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td 
width=156 align=middle class=td1>简要说明：</td>
      <td 
width=333 align=middle class=td2> 
        <div align="left">          
          <input name="qm" value="<%=rsuser("qm")%>" type="text" id="qm" size="30">
 </div>
      </td>
    </tr>
    <tr bgcolor="#F7FFF4"> 
      <td colspan="2" align=middle class=td0> 
        <div align="center"> 
          <p> 
            <input name="Action" type="hidden" id="Action" value="SaveModify">
            <input type="submit" value="修改" name="submit" class=Anbutc>
            <input name="UserID" type="hidden" id="UserID" value="<%=rsUser("userid")%>">
            <br>
            注意：级别依次为：0:一般会员 1.高级会员 2.认证会员 3.VIP 会员 4.系统管理员 5.被锁会员<br>
          </p>
          </div>
      </td>
    </tr>
    <tbody> </tbody> 
  </table>
  <p><br>
  </p>
</form>

<%
end sub

sub ModifyPurview()
	dim UserID
	dim rsUser,sqlUser
	UserID=trim(request("UserID"))
	if UserID="" then
		FoundErr=True
		ErrMsg=ErrMsg & "<br><li>请指定要修改的用户！</li>"
		exit sub
	else
		UserID=Clng(UserID)
	end if
	Set rsUser=Server.CreateObject("Adodb.RecordSet")
	sqlUser="select * from admin where userid=" & UserID
	rsUser.Open sqlUser,Conn,1,3
	if rsUser.bof and rsUser.eof then
		FoundErr=True
		ErrMsg=ErrMsg & "<br><li>用户无效！</li>"
		rsuser.close
		set rsuser=nothing
		exit sub
	end if
%>
<form method="post" action="Admin_user.asp" name="myform" onsubmit="javascript:CheckModifyPurview();">
  <table width="100%" border="0" align="center" cellpadding="2" cellspacing="1" bordercolor="#0099cc" bgcolor="#7ED3A7" class="border" >
    <tr class="title"> 
      <td height="22" colspan="2" bgcolor="#F7FFF4"> 
        <div align="center">
          <table width="100%" border="0" cellpadding="0" cellspacing="0" background="images/bg1.gif">
            <tr> 
              <td height="26"> <div align="center"><b><font size="2"><strong>修改管理员权限<%=rsUser("UserName")%> 
                  <input name="userid2" type="hidden" id="userid2" value="<%=rsUser("userid")%>">
                  </strong></font></b></div></td>
            </tr>
          </table>
          <font size="2"></font></div></td>
    </tr>   
    <tr class="tdbg">
      <td colspan="2" bgcolor="#F7FFF4">
<table id="PurviewDetail" width="100%" border="0" cellspacing="10" cellpadding="0" >
           <tr valign="top">
            <td width="49%" class="td0"><strong>网站管理权限</strong> 
              <table width="100%" border="0" cellspacing="1" cellpadding="2">
              <tr>
                <td width="50%" class="td1"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Channel" <%if CheckPurview(rsUser("AdminPurview"),"Channel")=True then response.write "checked"%>>
                  信息管理</td>
                <td width="50%" class="td2"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="AD" <%if CheckPurview(rsUser("AdminPurview"),"AD")=True then response.write "checked"%>>
                    投稿管理</td>
              </tr>
              <tr>
                <td width="50%" class="td1"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Announce" <%if CheckPurview(rsUser("AdminPurview"),"Announce")=True then response.write "checked"%>>
                  图片管理</td>
                <td width="50%" class="td2"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="FriendSite" <%if CheckPurview(rsUser("AdminPurview"),"FriendSite")=True then response.write "checked"%>>
                  会员管理</td>
              </tr>
              <tr>
                <td width="50%" class="td1"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Vote" <%if CheckPurview(rsUser("AdminPurview"),"Vote")=True then response.write "checked"%>>
                    广告管理&nbsp;</td>
                <td width="50%" class="td2"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Counter" <%if CheckPurview(rsUser("AdminPurview"),"Counter")=True then response.write "checked"%>>
投票管理</td>
              </tr>
              <tr>
                <td width="50%" class="td1"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="User" <%if CheckPurview(rsUser("AdminPurview"),"User")=True then response.write "checked"%>>
下载管理</td>
                <td width="50%" class="td2"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="MailList" <%if CheckPurview(rsUser("AdminPurview"),"MailList")=True then response.write "checked"%>>
                  论坛管理</td>
              </tr>
              <tr>
                <td class="td1"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Skin" <%if CheckPurview(rsUser("AdminPurview"),"Skin")=True then response.write "checked"%>>
                  联盟管理</td>
                <td class="td2"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Layout" <%if CheckPurview(rsUser("AdminPurview"),"Layout")=True then response.write "checked"%>>
                  系统管理</td>
              </tr>
              <tr>
                <td class="td1"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="JS" <%if CheckPurview(rsUser("AdminPurview"),"JS")=True then response.write "checked"%>>                  
                  系统安全</td>
                <td class="td2"><input name="AdminPurview" type="checkbox" id="AdminPurview" value="Database" <%if CheckPurview(rsUser("AdminPurview"),"Database")=True then response.write "checked"%>  disabled>
                    管理留言 </td>
              </tr>
              </table>
            </td>
        </tr>
      </table></td>
    </tr>
    <tr> 
      <td colspan="2" align="center" bgcolor="#F7FFF4" >
<input name="Action" type="hidden" id="Action" value="SaveModifyPurview">
        <input  type="submit" name="Submit3" value="保存修改结果" style="cursor:hand;" class=Anbutc> 
        &nbsp; 
        <input name="Cancel" type="button" id="Cancel" value=" 取 消 " onClick="window.location.href='Admin_user.asp'" style="cursor:hand;" class=Anbutc></td>
    </tr>
  </table>
</form>
<%
end sub
%>
</body>
</html>
<%
sub SaveAdd()
	dim UserName,Password,PwdConfirm,Sex,Email,Homepage,OICQ
	UserName=trim(request("UserName"))
	Password=EnPas(trim(request("userpass")))
	PwdConfirm=EnPas(trim(request("PwdConfirm")))
	Sex=trim(Request("Sex"))
	Email=trim(request("Email"))
	Homepage=trim(request("Homepage"))
	OICQ=trim(request("OICQ"))
    realname=trim(request("realname"))
	qm=trim(request("qm"))
	
	if UserName="" or strLength(UserName)>14 or strLength(UserName)<4 then
		founderr=true
		errmsg=errmsg & "<br><li>请输入用户名(不能大于14小于4)</li>"
	else
  		if Instr(UserName,"=")>0 or Instr(UserName,"%")>0 or Instr(UserName,chr(32))>0 or Instr(UserName,"?")>0 or Instr(UserName,"&")>0 or Instr(UserName,";")>0 or Instr(UserName,",")>0 or Instr(UserName,"'")>0 or Instr(UserName,",")>0 or Instr(UserName,chr(34))>0 or Instr(UserName,chr(9))>0 or Instr(UserName,"