update_moderator.asp

此程序是一个个人主页创造程序,该程序无插件,无任何恶意程序.

<%
'#############################################################
'#      中国在线--极酷论坛 ver.2001 3.0
'#
'#  版权所有: 中国在线 (ChinaXP.Net)
'#
'#  制作人  : 周周 (SeeYa!)
'#
'#
'#  主页地址: http://www.ChinaXP.net/    中国在线
'#	       http://bbs.ChinaXP.Net    中国在线--极酷论坛
'#
'#############################################################
%>
<table bgcolor="<%=strTableBorderColor%>" cellspacing="1" cellpadding="3" width="100%">
<%			Select Case Request("action")
			Case "updatemodlist"	'## Update Moderator Table for the Forum

				
				'## Need to verify that Forum ID is present & is a Number
				Dim intRfForumID : intRfForumID = Request.Form("forumid")
				
				If ((intRfForumID <> "") AND IsNumeric(intRfForumID)) Then

					intRfForumID = CInt(intRfForumID)
	
					'## Update Moderator Table
					Dim oCheckBox
					'## 1st Step - clear out current moderators for forum
					'## Forum_SQL - Delete Moderators
					if intRfForumID <> "-1" then
					strSql = "DELETE FROM " & strTablePrefix & "MODERATOR "
					strSql = strSql & " WHERE " & strTablePrefix & "MODERATOR.FORUM_ID = " & intRfForumID & " "
					my_Conn.Execute strSql
					else
					For Each oCheckBox in Request("moderator")
					strSql = "DELETE FROM " & strTablePrefix & "MODERATOR "
					strSql = strSql & " WHERE " & strTablePrefix & "MODERATOR.MEMBER_ID = " & oCheckBox & " "
					my_Conn.Execute strSql
					Next
					end if
					'## 2nd Step - insert the moderators that were checked
					
					For Each oCheckBox in Request("moderator")
						'## Forum_SQL - Insert Moderators
						strSql = "INSERT INTO " & strTablePrefix & "MODERATOR "
						strSql = strSql & "(FORUM_ID"
						strSql = strSql & ", MEMBER_ID"
						strSql = strSql & ") VALUES ("
						strSql = strSql & intRfForumID
						strSql = strSql & ", " & oCheckBox
						strSql = strSql & ")"
						my_Conn.Execute strSql
					Next


					response.write ("<br>")
					If (strModAdminForumName <> "") Then
						response.write ("<b><a href=""admin_moderators.asp?forum=" & intRfForumID & """>" & strModAdminForumName & "</a></b>的版主名单已更新成功！")
					Else
						response.write ("所选的论坛版主名单已更新！")
					End If
					Response.Write ("<form name=""moderatorlist"" method=""post"" action="""">")
					Response.Write ("<input type=""hidden"" name=""UserID"" value=""a"">")
					Response.Write ("<input type=""hidden"" name=""forumid"" value="""">")
					Response.Write "<input type=""hidden"" name=""action"" value="""">" &_
						"<input type=""submit"" name=""Update"" value="" 回到版主设置中心 ""></form> "

			
				Else
				
					'## Error with getting the Forum ID
					response.write ("<p>处理时发生错误  Forum ID 不合法！</p>")
				
				End If
			
			Case Else
			
				if Request("UserID") = "" then%>
<tr><td bgcolor="<%=strHeadCellColor%>"><font color="<%=strHeadFontColor%>" size="<%=strDefaultFontSize%>" face="<%=strDefaultFontFace%>">选择版主</font></td></tr>
<%					Response.Write ("<tr><td bgcolor=""" & strAltForumCellColor & """><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>分类：</b> " & strModAdminCategoryName & "</td></tr>" & vbCrLf)
					Response.Write ("<tr><td bgcolor=""" & strAltForumCellColor & """><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>论坛：</b> " & strModAdminForumName & "</td></tr>" & vbCrLf)%>
<tr><td bgcolor="<%=strHeadCellColor%>"><font color="<%=strHeadFontColor%>" size="<%=strDefaultFontSize%>" face="<%=strDefaultFontFace%>">本版版主选择（<FONT color="<% =strInsistFontColor %>">注：前面打勾为现任版主</FONT>）</font></td></tr>
<tr>
<td bgcolor="<%=strForumCellColor%>" onmouseover="bgColor='<%=strAltForumCellColor%>'" onmouseout="bgColor='<%=strForumCellColor%>'"><font size="<%=strDefaultFontSize%>">

<%					
					'## Forum_SQL
					strSql = "SELECT " & strMemberTablePrefix & "MEMBERS.MEMBER_ID, " & strMemberTablePrefix & "MEMBERS.M_NAME "
					strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS "
					strSql = strSql & " WHERE " & strMemberTablePrefix & "MEMBERS.M_LEVEL > 1 "
					strSql = strSql & " AND   " & strMemberTablePrefix & "MEMBERS.M_STATUS = " & 1
					strSql = strSql & " ORDER BY " & strMemberTablePrefix & "MEMBERS.M_NAME ASC;"

					set rs = my_Conn.Execute(strSql)

					response.write ("<form name=""moderatorlist"" method=""post"" action="""">")
					response.write ("<input type=""hidden"" name=""action"" value=""updatemodlist"">")
					response.write ("<input type=""hidden"" name=""forumid"" value=""" & intQsForumID & """>")

					Response.Write ("<TABLE width=""100%"" border=0><TR>")
					strMods = 0
					do until rs.EOF

						strMods = strMods + 1
						strRsMember = rs("M_NAME")
						intRsMemberID = rs("MEMBER_ID")
						Response.Write ("<td width=""20%"" align=left bgcolor=" & strForumCellColor & "><font face=" & strDefaultFontFace & " size=" & strDefaultFontSize & ">")

						'## Build list of available moderators
						response.write ("<input type=""checkbox"" name=""moderator"" value=""" & intRsMemberID & """")
						'## Check to see if already a moderator for this forum
						if chkForumModerator(intQsForumID, strRsMember) then Response.Write(" checked")
						response.write ("> " & strRsMember & "</td>")
						
						if strMods mod 5 = 0 then Response.Write ("</TR><TR>")
						rs.MoveNext
					loop
					Response.Write ("</TR></TABLE>")
					response.write ("<br>" &_
						"<input type=""submit"" name=""Update"" value=""更新""> " &_
						"<input type=""reset"" name=""Reset"" value=""重设""> " &_
						"</form>")

				else%>
<tr><td bgcolor="<%=strHeadCellColor%>"><font color="<%=strHeadFontColor%>" size="<%=strDefaultFontSize%>" face="<%=strDefaultFontFace%>">选择版主</font></td></tr>
<tr>
<td bgcolor="<%=strForumCellColor%>" onmouseover="bgColor='<%=strAltForumCellColor%>'" onmouseout="bgColor='<%=strForumCellColor%>'"><font size="<%=strDefaultFontSize%>">

<%					response.write ("<p>Please select a forum from the left.</p>")
				end if
		End Select
%>
</td>
</tr>
</table>