admin_admin.asp

电子备课系统

	      			%>
	      		<option value="<%=rst(0)%>"><%=rst(1)%></option>
	      			<%
	      			rst.MoveNext
	      		Loop
	      	End If
      		%>
    	</select>
      	</td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">用 户 名：</div></td>
      <td width="65%" class="tdbg"><input name="username" type="text"> &nbsp;</td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">初始密码： </div></td>
      <td width="65%" class="tdbg"><font size="2">
        <input type="password" name="Password">
        </font></td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">确认密码：</div></td>
      <td width="65%" class="tdbg"><font size="2">
        <input type="password" name="PwdConfirm">
        </font></td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">绑定用户数字ID：</div></td>
      <td width="65%" class="tdbg"><input name="userid" type="text">(前台管理员可绑定用户ID，但是仅可以绑定一个) &nbsp;</td>
    </tr>
    <tr class="tdbg">
      <td colspan="2"><div align="center">
          <input name="Action" type="hidden" id="Action" value="SaveAdd">
          <input  type="submit" name="Submit" value=" 添 加 " style="cursor:hand;">
          &nbsp;
          <input name="Cancel" type="button" id="Cancel" value=" 取 消 " onClick="window.location.href='Admin_Admin.asp'" style="cursor:hand;">
        </div></td>
    </tr>
  </table>
</form>
		</div>
	</div>
	<ul class="main_end">
		<li class="main_end_left left"></li>
		<li class="main_end_right right"></li>
	</ul>
</div>
<%
end sub
%>
<%
sub SaveAdd()
	dim username, password,PwdConfirm,userid
	If Instr(strPara,"password") Then
		Response.Write"<script language=JavaScript>"
		Response.Write"alert(""注意：外部恶意连接！"");"
		Response.Write"window.history.go(-1);"
		Response.Write"</script>"
		Exit Sub
	End If
	username=Trim(Request("username"))
	password=Trim(Request("Password"))
	roleid=Trim(Request("roleid"))
	userid=Trim(Request("userid"))
	If roleId="" Then
		roleId=0
	Else
		roleid=Int(roleid)
	End If
	If userid="" Then
		userid=0
	Else
		if not IsNumeric(userid) then
			oblog.ShowMsg "用户id必须为数字！","back"
			exit sub
		end if
		userid=Int(userid)
	End If
	sql="select * from oblog_admin where username='"&username&"'"
	if not IsObject(conn) then link_database
	Set rs=Server.CreateObject("Adodb.RecordSet")
	rs.Open sql,conn,1,3
	if not (rs.bof and rs.EOF) then
		Response.Write"<script language=JavaScript>"
		Response.Write"alert(""对不起！此用管理员已经存在，请更换用户名再进行注册！"");"
		Response.Write"window.history.go(-1);"
		Response.Write"</script>"
		rs.close
		set rs=nothing
		exit sub
	end if
   	rs.addnew
   	rs("roleid")=roleid
 	rs("username")=username
   	rs("password")=md5(password)
   	rs("userid")=userid
	rs.update
    rs.Close
	set rs=Nothing
	If userid>0 Then oblog.Execute "Update Oblog_user Set roleid=" & roleid & " Where userid=" & userid
	Call main()
end sub

sub SaveEdit()
	dim id,username, password,PwdConfirm,userid,userid1
	If Instr(strPara,"password") Then
		Response.Write"<script language=JavaScript>"
		Response.Write"alert(""注意：外部恶意连接！"");"
		Response.Write"window.history.go(-1);"
		Response.Write"</script>"
		Exit Sub
	End If
	id=Trim(Request("id"))
	username=Trim(Request("username"))
	password=Trim(Request("Password"))
	PwdConfirm=Trim(Request("PwdConfirm"))
	roleid=Trim(Request("roleid"))
	userid=Trim(Request("userid"))
	if password<>PwdConfirm then
		Response.Write"<script language=JavaScript>"
		Response.Write"alert(""两次输入的密码不同，如果不修改请留空！"");"
		Response.Write"window.history.go(-1);"
		Response.Write"</script>"
		exit sub
	end If
	If password <> "" Then
		if Len(password)<8 then
			Response.Write"<script language=JavaScript>"
			Response.Write"alert(""密码长度最少为8位，如果不修改请留空！"");"
			Response.Write"window.history.go(-1);"
			Response.Write"</script>"
			exit sub
		end If
	End if
	If roleId="" Then
		roleId=0
	Else
		roleid=Int(roleid)
	End If
	If userid="" Then
		userid=0
	Else
		userid=Int(userid)
	End If
	sql="select * from oblog_admin where id=" & id
	if not IsObject(conn) then link_database
	Set rs=Server.CreateObject("Adodb.RecordSet")
	rs.Open sql,conn,1,3
	If Not IsNull(rs("userid")) Then userid1=rs("userid")
   	rs("roleid")=roleid
   	If password<>"" Then rs("password")=md5(password)
   	rs("userid")=userid
	rs.update
    rs.Close
	set rs=Nothing
	'先取消
	If userid1<>"" Then oblog.Execute "Update Oblog_user Set roleid=0 Where userid=" & userid1
	'重新绑定
	If userid>0 Then oblog.Execute "Update Oblog_user Set roleid=" & roleid & " Where userid=" & userid
	EventLog "进行了添加(修改)管理员的操作，目标管理员ID为："&OB_IIF(id,"无"),oblog.NowUrl&"?"&Request.QueryString
	Call main()
end sub

sub DelAdmin()
	dim UserID
	If Instr(strPara,"del") Then
		Response.Write"<script language=JavaScript>"
		Response.Write"alert(""注意：外部恶意连接！"");"
		Response.Write"window.history.go(-1);"
		Response.Write"</script>"
		Exit Sub
	End If
	UserID=Trim(Request("ID"))
	if UserID="" then
		Response.Write"<script language=JavaScript>"
		Response.Write"alert(""请选择要删除的管理员！"");"
		Response.Write"window.history.go(-1);"
		Response.Write"</script>"
		exit sub
	end if
	if instr(UserID,",")>0 then
		UserID=Replace(UserID," ","")
		sql="select * from oblog_Admin where ID in (" & UserID & ")"
	else
		UserID=CLng(UserID)
		sql="select * from oblog_Admin where ID=" & UserID
	end if
	Set rs=Server.CreateObject("Adodb.RecordSet")
	rs.Open sql,conn,1,3
	do while not rs.eof
		rs.delete
		rs.update
		rs.movenext
	loop
	rs.close
	set rs=Nothing
	EventLog "进行了删除管理员的操作，目标管理员ID为："&UserID,oblog.NowUrl&"?"&Request.QueryString
	call main()
end sub

sub EditAdmin()
Dim adminid
adminid=Int(Request("id"))
'Set rs=oblog.Execute("select * From oblog_admin Where roleid>0 And id=" & adminId)
Set rs=oblog.Execute("select * From oblog_admin Where id=" & adminId)
If rs.Eof Then
	Response.Redirect "admin_admin.asp"
End If
%>
<div id="main_body">
	<ul class="main_top">
		<li class="main_top_left left">修 改 管 理 员</li>
		<li class="main_top_right right"> </li>
	</ul>
	<div class="main_content_rightbg">
		<div class="main_content_leftbg">
<form method="post" action="admin_admin.asp" name="form1">
  <table width="98%" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#FFFFFF" class="border" >
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">选择管理员角色：</div></td>
      <td width="65%" class="tdbg">
      	<select name="roleid" <%if rs("username")=AdminName Then Response.Write "disabled" End if%>>
			<option value="-1">请选择管理权限</option>
      		<option value="0" <%If rs("roleid")=0 Then Response.Write "selected" End if%> >系统管理员(不可绑定用户ID)</option>
      		<%
      		rst.Movefirst
      		Do While Not rst.Eof
      			%>
      		<option value="<%=rst(0)%>" <%If rst(0)=rs("roleid") Then Response.Write "selected" End if%>><%=rst(1)%></option>
      			<%
      			rst.MoveNext
      		Loop
      		%>
    	</select>
      	</td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">用 户 名：</div></td>
      <td width="65%" class="tdbg"><input name="username" type="text" value="<%=rs("username")%>" disabled> &nbsp;</td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">初始密码： </div></td>
      <td width="65%" class="tdbg"><font size="2">
        <input type="password" name="Password">
        </font>(不修改密码请留空)</td>
    </tr>
    <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">确认密码：</div></td>
      <td width="65%" class="tdbg"><font size="2">
        <input type="password" name="PwdConfirm">
        </font></td>
    </tr>
     <tr class="tdbg">
      <td width="35%" class="tdbg"><div align="right">绑定用户ID：</div></td>
      <td width="65%" class="tdbg"><input name="userid" type="text" value="<%=rs("userid")%>">(前台管理员可绑定用户ID，但是仅可以绑定一个) &nbsp;</td>
    </tr>
    <tr class="tdbg">
      <td colspan="2"><div align="center">
      	 <input name="id" type="hidden" id="id" value="<%=rs("id")%>">
          <input name="Action" type="hidden" id="Action" value="SaveEdit">
          <input  type="submit" name="Submit" value=" 修 改 " style="cursor:hand;">
          &nbsp;
          <input name="Cancel" type="button" id="Cancel" value=" 取 消 " onClick="window.location.href='Admin_Admin.asp'" style="cursor:hand;">
        </div></td>
    </tr>
  </table>
</form>
		</div>
	</div>
	<ul class="main_end">
		<li class="main_end_left left"></li>
		<li class="main_end_right right"></li>
	</ul>
</div>
</body>
</html>
<%
end Sub
Set oblog = Nothing
%>