shopa_user_control.asp

ASP+SQL Server动态网站开发从基础到实践教程

<!--#include file="shop$db.asp"-->
<!--#include file="shopa_tools.asp"-->
<%
'**************************************************************************
'只有管理员才有权限进入，而其他用户不能进入该模块

'**************************************************************************
'检查用户权限
ShopCheckAdmin
sError=""
OpenDB con, Session("db")
'如果是单击加入新用户按钮
If Not Request("submit")="" Then
        ValidateFields
        if sError="" then
	'获得所有权限
	 For each item in request("Access")
		a = a & "," & item
 	Next
	access = Right(a,Len(a)-1)
	dup = "SELECT * FROM tblUser WHERE fldUserName = '" & Request("UserName") & "'"
	Set rs = con.Execute(dup)
	If rs.EOF Then
		SQL = "INSERT INTO tblUser (fldUserName,fldPassword,fldAccess) VALUES ('" & Request("UserName") & "','" & Request("Password") & "','" & access & "')"
		con.Execute(SQL)
	Else
		msg = "Username already exists."
	End If
       end if 
End If
'删除用户
If Request("Delete")<>"" Then
	For each item in Request("DeleteUser")
		d = "DELETE * FROM tblUser WHERE fldAuto = " & item
		con.Execute(d)
	Next
End If
AdminPageHeader

If Serror<>"" then
  Response.write sError
end if
%>

<table border="0" cellpadding="0" cellspacing="0" width="100%">
<%
SQL = "SELECT * FROM tblUser"
Set objRec = con.Execute(SQL)
%>
<form action="shopa_user_control.asp" method="post">
</font></font><table border=0>
<tr>
	<td colspan="4"><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font size=2 face=arial><b>以下为管理用户：</b></font></font></font></td>
</tr>
<tr BGCOLOR="#0080C0">
	<th><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color="white"><b>用户名</b></font></font></font></th>
	<th><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color="white"><b>权限</b></font></font></font></th>
	<th><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color="white"><b>编辑</b></font></font></font></th>
	<th><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color="white"><b>删除</b></font></font></font></th>
</tr>
</tr>
<%While Not objRec.EOF
id = objRec("fldAuto")
user = objRec("fldUserName")
%>
<tr bgcolor="#E5E5E5">
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color=navy><%=user%></font></font></font></td>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color=navy><%=ConvertAccess(objRec("fldAccess"))%></font></font></font></td>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><center><font face="arial" size=2 color=navy><a href="shopa_user_edit.asp?id=<%=id%>">Edit</a></font></center></font></font></td>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><center><input type="checkbox" name="DeleteUser" value="<%=id%>"></center></font></font></td>
</tr>
<%objRec.MoveNext
Wend
objRec.Close
%>
<tr>
	<td colspan="5"><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><center><input type="submit" name="Delete" value="删除用户"></center></font></font></td>
</tr>
<tr>
	<td colspan="5"><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica">
<p align="center"></p></font></font></td>
</tr>
</table><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica">
</form>
<form action="shopa_user_control.asp" method="post">
</font></font><table>
<%If msg <> "" Then%>
<tr>
	<td colspan="2" align="center"><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font size=2 face=arial color="#ff0000"><%=msg%></font></font></font></td>
</tr>
<%End If%>
<tr>
	<td colspan="2" align="center"><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=3 ><b>增加新用户</b></font><br></font></font></td>
</tr>
<tr>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color=navy><b>用户名:</b></font></font></font></td>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><input type="text" name="UserName"></font></font></td>
</tr>
<tr>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color=navy><b>密码:</b></font></font></font></td>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><input type="text" name="Password"></font></font></td>
</tr>
<tr>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica">&nbsp;</font></font></td>
	<td><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><font face="arial" size=2 color=navy><b>具体权限:</b></font><br>
	<%BuildAccess "0"%>
	</font></font></td>
</tr>
<tr>
	<td colspan="2"><font face="Arial, Arial, Helvetica"><font face="Arial, Arial, Helvetica"><center><input type="submit" value="加入新用户" name="submit"></center></font></font></td>
</tr>
</table><font face="Arial, Arial, Helvetica">
</form>
</table><font face="Arial, Arial, Helvetica">
<%
AdminPageTrailer

Sub ValidateFields
	Serror=""
	if Request("Access")="" then
	   sError= sError & "新用户至少需要一个权限.<br>"
	end if
	if Request("UserName")="" then
	     sError= sError & "缺少用户名<br>"
	end if
	if Request("Password")="" then
	     sError= sError & "缺少密码.<br>"
	end if
end sub
%>