📄 admin_save.asp
字号:
<!-- #include file="../conn.asp" -->
<!--#include file="session.asp"-->
<!--#include file="../inc/config.asp"-->
<!--#include file="../inc/GetFunction.asp"-->
<!--#include file="../inc/upfile.asp"-->
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link href="css.css" rel="stylesheet" type="text/css">
</head>
<body>
<%
Select Case request.querystring("info")
Case "article_addft"
Call article_addft()
Case "article_ftedit"
Call article_ftedit()
Case "article_ftdel"
Call article_ftdel()
Case "article_ftlistdel"
Call article_ftlistdel()
Case "adminadd"
Call adminadd()
Case "adminedit"
Call adminedit()
Case "admindel"
Call admindel()
Case "author_add"
Call author_add()
Case "author_edit"
Call author_edit()
Case "author_del"
Call author_del()
Case "author_listdel"
Call author_listdel()
Case "user_add"
Call user_add()
Case "user_vipadd"
Call user_vipadd()
Case "user_gxadd"
Call user_gxadd()
Case "user_edit"
Call user_edit()
Case "user_del"
Call user_del()
Case "user_listdel"
Call user_listdel()
Case "guanggao_info"
Call guanggao_info()
Case "guanggao_add"
Call guanggao_add()
Case "guanggao_edit"
Call guanggao_edit()
Case "guanggao_del"
Call guanggao_del()
Case "guanggao_listdel"
Call guanggao_listdel()
end select
sub article_addft()
if request.form("subject")="" then
ErrCodes = ErrCodes & "<li>名称不能为空!</li><br>"
FoundErr=True
end if
if request.form("message")="" then
ErrCodes = ErrCodes & "<li>内容不能为空!</li><br>"
FoundErr=True
end if
if len(request.form("subject"))>200 then
ErrCodes = ErrCodes & "<li>您发表的访谈标题大于所规定字数(限定200字之内)!</li><br>"
FoundErr=True
end if
if len(request.form("message"))>ArticlesizeNum then
ErrCodes = ErrCodes & "<li>您发表的访谈内容大于所规定字数(限定"&ArticlesizeNum&"字之内)!</li><br>"
FoundErr=True
end if
if FoundErr=True then
Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
set rs=server.CreateObject("ADODB.recordset")
sql="select * from Article order by Ar_id desc"
rs.open sql,conn,1,3
rs.addnew
rs("Ar_name")=GetTextFromHtml(request.form("subject"))
rs("Ar_Content")=htmlencode(request.form("message"))
rs("Ar_pic")=request.Form("Ar_pic")
rs("Ar_key")="作家访谈"
rs("Ar_class")=0
rs("Ar_Author")=request.querystring("Ar_Author")
rs("Ar_size")=Len(request.form("message"))
rs("Ar_username")="作家访谈"
rs("Ar_data")=now()
rs("Ar_lock")=0
rs.update
rs.close
rs.open sql,conn,1,1
ID=rs("Ar_id")
rs.close
set rs=nothing
if request.form("attach")<>"" then
attachArray=Split(request.form("attach"),";")
For i1=0 To Ubound(attachArray)-1
if Instr(request.form("message"),attachArray(i1))> 0 then
attachid=CheckSql(Replace(Replace(attachArray(i1),"[attach]",""),"[/attach]",""))
CheckSqlnum(attachid)
conn.execute ("update filetest set fileurl_fileID="&ID&" where id="&attachid)
end if
Next
end if
if makeJS=1 then
temauthor()
end if
call connclose()
Call ShowAdminSuccessMsg("作家访谈添加成功!","admin_author.asp?info=list")
end if
end sub
'——————————
Sub article_ftedit()
id=CheckSql(request("id"))
CheckSqlnum(id)
id=int(id)
if request.form("subject")="" then
ErrCodes = ErrCodes & "<li>名称不能为空!</li><br>"
FoundErr=True
end if
if request.form("message")="" then
ErrCodes = ErrCodes & "<li>内容不能为空!</li><br>"
FoundErr=True
end if
if len(request.form("subject"))>200 then
ErrCodes = ErrCodes & "<li>您发表的访谈标题大于所规定字数(限定200字之内)!</li><br>"
FoundErr=True
end if
if len(request.form("message"))>ArticlesizeNum then
ErrCodes = ErrCodes & "<li>您发表的访谈内容大于所规定字数(限定"&ArticlesizeNum&"字之内)!</li><br>"
FoundErr=True
end if
if FoundErr=True then
Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
conn.execute ("update Article set "&_
"Ar_name='"&GetTextFromHtml(request.form("subject"))&"',"&_
"Ar_Content='"&htmlencode(request.form("message"))&"',"&_
"Ar_username='"&request.cookies("CnendWeb")("admininfo_loginname")&"',"&_
"Ar_size="&Len(request.form("message"))&","&_
"Ar_data=now()"&_
" where Ar_id="&id)
if request.form("attach")<>"" then
attachArray=Split(request.form("attach"),";")
For i1=0 To Ubound(attachArray)-1
if Instr(request.form("message"),attachArray(i1))> 0 then
attachid=CheckSql(Replace(Replace(attachArray(i1),"[attach]",""),"[/attach]",""))
CheckSqlnum(attachid)
conn.execute ("update filetest set fileurl_fileID="&ID&" where id="&attachid)
end if
Next
end if
'处理文章中包含的上传附件开始
nolinkfile=""
set rs=server.createobject("adodb.recordset")
sql="select id from filetest where fileurl_class=2 and fileurl_fileID="&ID&" order by id desc"
rs.open sql,conn,1,3
if rs.eof and rs.bof then
else
do while not rs.eof
attachs="[attachimg]attachment.asp?id="&rs("id")&"[/attachimg]"
attachs1="[attach]"&rs("id")&"[/attach]"
if Instr(request.form("message"),attachs)< 1 then
nolinkfile=nolinkfile&"||"&rs("id")
end if
if Instr(request.form("message"),attachs1)< 1 then
nolinkfile=nolinkfile&"||"&rs("id")
end if
Rs.MoveNext
Loop
end if
Rs.Close
Set Rs=Nothing
if nolinkfile<>"" then
arrnolink=split(nolinkfile,"||")
for i=1 to ubound(arrnolink)
conn.execute ("update filetest set fileurl_fileID=0 where id="&arrnolink(i))
next
end if
'处理文章中包含的上传附件结束
if makeJS=1 then
temauthor()
end if
call connclose()
Call ShowAdminSuccessMsg("作家访谈修改成功!","admin_article.asp?info=edit&id="&id&"")
end if
end sub
'——————————
sub article_ftdel()
Ar_id=request.querystring("Ar_id")
page=request.querystring("page")
conn.execute "delete from Article where Ar_id = "&Ar_id&""
set rsfile=server.createobject("adodb.recordset")
strSQL ="select fileurl_name,fileurl_path from filetest where fileurl_class=2 and fileurl_fileID ="&Ar_id&""
rsfile.open strSQL,conn,1,1
if not(rsfile.eof and rsfile.bof) then
do while not rsfile.eof
file1=rsfile("fileurl_path")&rsfile("fileurl_name")
FSOFiledel(file1)
rsfile.movenext
loop
end if
rsfile.close
set rsfile=nothing
conn.execute"delete from filetest where ID ="&Ar_id&""
Success = Success & "<li> 访谈文章附件已全部清理!</li><br>"
if makeJS=1 then
temauthor()
end if
call connclose()
Call ShowAdminSuccessMsg(Success & "<li>作家访谈删除成功!</li><br>","admin_author.asp?info=ftlist&page="&page&"")
end sub
'——————————
sub article_ftlistdel()
id=trim(request("checked"))
If ID="" Then
ErrCodes = ErrCodes & "<li>您至少需要选择一个访谈纪录!</li><br>"
FoundErr=True
End If
if FoundErr=True then
Call ShowAdminErrMsg(ErrCodes,"javascript:window.close()")
else
viewArray=Split(ID, ",")
Num = UBound(viewArray)
For i=0 To Num
conn.execute "delete from Article where Ar_id in ("&viewArray(i)&") "
set rsfile=server.createobject("adodb.recordset")
strSQL ="select fileurl_name,fileurl_path from filetest where fileurl_class=2 and fileurl_fileID ="&viewArray(i)&""
rsfile.open strSQL,conn,1,1
if not(rsfile.eof and rsfile.bof) then
do while not rsfile.eof
file1=rsfile("fileurl_path")&rsfile("fileurl_name")
FSOFiledel(file1)
rsfile.movenext
loop
end if
rsfile.close
set rsfile=nothing
conn.execute"delete from filetest where ID ="&viewArray(i)&""
Next
Success = Success & "<li> 访谈文章附件已全部清理!</li><br>"
if makeJS=1 then
temauthor()
end if
call connclose()
response.write ("<script>opener.location.reload();</script>")
Call ShowAdminSuccessMsg(Success & "<li>作家访谈删除操作成功!</li><br>","javascript:window.close()")
end if
end sub
'——————————
sub adminadd
dim username,password,email,QQ,userclass
username=trim(request.form("username"))
truename=trim(request.form("truename"))
password=trim(request.form("password"))
email=trim(request.form("e-mail"))
QQ=trim(request.form("QQ"))
userclass=trim(request.form("userclass"))
if username="" then
ErrCodes = ErrCodes & "<li>名称不能为空!</li><br>"
FoundErr=True
end if
if truename="" then
ErrCodes = ErrCodes & "<li>昵称不能为空!</li><br>"
FoundErr=True
end if
if password="" then
ErrCodes = ErrCodes & "<li>密码不能为空!</li><br>"
FoundErr=True
end if
if Instr(UserName,"=")>0 or Instr(UserName,"%")>0 or Instr(UserName,chr(32))>0 or Instr(UserName,"?")>0 or Instr(UserName,"&")>0 or Instr(UserName,";")>0 or Instr(UserName,",")>0 or Instr(UserName,"'")>0 or Instr(UserName,",")>0 or Instr(UserName,chr(34))>0 or Instr(UserName,chr(9))>0 or Instr(UserName,"
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -