saveuser.asp

ASP实现的一个旅游线路预订系统．．．ASP代码

<!--#include file="conn.asp"-->
<!--#include file="../md5.asp"-->
<%if session("admin")="" then
	response.Write "<script language='javascript'>alert('网络超时或您还没有登陆！');window.location.reload('login.asp')</script>"
	response.End
else
	if session("flag")>1 then
		response.Write "<div align=center><font size=80 color=red><b>您没有此项目管理权限！</b></font></div>"
		response.End
	end if
end if
dim userid,action
action=request.QueryString("action")
userid=request.QueryString("id")
if userid="" then userid=request("userid")
select case action
case "save"
	set rs=server.CreateObject("adodb.recordset")
	rs.Open "select * from [user] where userid="&userid,conn,1,3
	if trim(request("userpassword"))<>"" then rs("userpassword")=md5(trim(request("userpassword")))
	rs("userzhenshiname")=trim(request("userzhenshiname"))
	rs("useremail")=trim(request("useremail"))
	rs("quesion")=trim(request("quesion"))
	if trim(request("answer"))<>"" then rs("answer")=md5(trim(request("answer")))
	rs("shousex")=request("usersex")
	rs("shengshi")=trim(request("shengshi"))
	rs("shouhuodizhi")=trim(request("shouhuodizhi"))
	rs("youbian")=trim(request("youbian"))
	rs("usertel")=trim(request("usertel"))
	rs.Update
	rs.Close
	set rs=nothing
	response.Write "<script language=javascript>alert('操作成功!');window.location.reload('manageuser.asp')</script>"
case "del"
	conn.execute "delete from [user] where userid in ("&userid&") "
	conn.execute "delete from shop_action where userid in ("&userid&")"
	response.Redirect "manageuser.asp"
end select
%>