shopa_menu_control.asp

ASP+SQL Server动态网站开发从基础到实践教程

<!--#include file="shop$db.asp"-->
<!--#include file="shopa_tools.asp"-->
<%
'*******************************************************
' Shop Administration only
' different users can have different capabilities
' Menu items can be added or deleted
' user must have logged in to gain access to this rountine
'******************************************************
ShopCheckAdmin
OpenDB con, Session("db")
DeleteMenu = True
If Not Request("AddMenu")="" Then
        ValidateFields
        if Serror="" then 
         ad = "INSERT INTO tblAccess (fldName,fldURL) VALUES ('" & Request("Name") & "','" & Request("File") & "')"
	 con.execute(ad)
        end if
End If 
If Request("Delete")<>"" Then
	For each item in Request("DeleteMenu")
		SQL = "SELECT * FROM tblUser"
		Set rs = con.Execute(SQL)
		access = Split(rs("fldAccess"),",")
		For each a in access
			if cStr(Trim(item)) = cStr(Trim(a)) Then
				DeleteMenu = False
			End if
		Next
		If DeleteMenu Then
			d = "DELETE * FROM tblAccess WHERE fldAuto = " & item
			con.Execute(d)
		End If
	Next
End If
AdminPageHeader
If Serror<>"" then
  Response.write sError
end if
SQL = "SELECT * FROM tblAccess"
Set objRec = con.Execute(SQL)
%>
<br>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<center>
<form action="shopa_menu_control.asp" method="post">
<table border=0 width=80%>
<tr>
<td colspan="4"><font size=2 face=arial><b>管理员菜单管理:</b></font></td>
</tr>
<tr BGCOLOR="#0080C0">
	<th><font face="arial" size=2 color="white"><b>菜单名称:</b></font></th>
	<th><font face="arial" size=2 color="white"><b>文件名称:</b></font></th>
	<th><font face="arial" size="2" color="#FFFFFF">删除</font><font face="arial" size=2 color="white"><b>:</b></font></th>
</tr>
</tr>
<%While Not objRec.EOF
id = objRec("fldAuto")
name = objRec("fldName")
%>
<tr bgcolor="#E5E5E5">
	<td><font face="Trebuchet MS, Arial, Helvetica"><font face="arial" size=2 color=navy><%=name%></font></font></td>
	<td><font face="Trebuchet MS, Arial, Helvetica"><font face="arial" size=2 color=navy><%=objRec("fldURL")%></font></font></td>
	<td><font face="Trebuchet MS, Arial, Helvetica"><center><input type="checkbox" name="DeleteMenu" value="<%=id%>"></center></font></td>
</tr>
<%objRec.MoveNext
Wend
objRec.Close
%>
<tr>
	<td colspan="5"><font face="Trebuchet MS, Arial, Helvetica"><font color=red face=arial size=1>Before deleting a menu, delete user access to this menu first</font></font></td>
</tr>
<tr>
	<td colspan="5"><font face="Trebuchet MS, Arial, Helvetica"><center>
	<input type="submit" name="Delete" value="删除选中菜单"></center></font></td>
</tr>
</table><font face="Trebuchet MS, Arial, Helvetica">
</form>
<form action="shopa_menu_control.asp" method="post">
</font><table>
<%if DeleteMenu=False Then%>
<tr>
	<td colspan="2"><font face="Trebuchet MS, Arial, Helvetica"><font face=Arial size=2 color="#ff0000">Please Delete User Access First!</font></font></td>
</tr>
<%End If%>
<tr>
<td colspan="2"><font face="Trebuchet MS, Arial, Helvetica"><p align="center">
</tr>
<tr>
<td colspan="2"><font face="arial"><center><b>添加新菜单</b></font><font face="Trebuchet MS, Arial, Helvetica"><br>
</center></font></td>
</tr>
<tr>
	<td><b><font face="arial" size="2" color="#000080">菜单名称</font></b><font face="arial" size=2 color=navy><b>:</b></font></td>
	<td><font face="Trebuchet MS, Arial, Helvetica"><input type="text" name="Name"></font></td>
</tr>
<tr>
	<td><font face="arial" size=2 color=navy><b>文件名称:</b></font></td>
	<td><font face="Trebuchet MS, Arial, Helvetica"><input type="text" name="File"></font></td>
</tr>
<tr>
	<td colspan="2"><font face="Trebuchet MS, Arial, Helvetica"><center>
	<input type="submit" value="添加新菜单" name="AddMenu"></center></font></td>
</tr>
</table><font face="Trebuchet MS, Arial, Helvetica">
</form>
</table><font face="Trebuchet MS, Arial, Helvetica">
</font>
<%
adminPageTrailer

Sub ValidateFields
	Serror=""
	if Request("Name")="" then
	   sError= sError & "Menu name is required.<br>"
	end if
	if Request("File")="" then
	     sError= sError & "File is missing. It the html or ASP file to be executed or full URL.<br>"
	end if
end sub
%>