managestudent.asp

一套完整的学生课程管理系统

<!-- #include file="utility/checkAdmin.asp" -->
<!-- #include file="utility/md5.asp" -->

<%
	'****************************************
	'目的：			处理学生信息
	'开始时间：		2005-6-4 15:57
	'最后修改时间：	2005-6-4 15:57
	'编写人：		某某某
	'****************************************
	
	'定义相关变量
	dim actionType			'操作类型
	dim studentID
	dim sql				
	dim rs
	
	actionType = Request.QueryString("actionType")
	studentID = Request.QueryString("stuID")
	
	if(actionType = "") then
		Alert("参数丢失，操作失败！")
		GoBack()
		Response.end
	end if
	
	'判断操作类型并执行对应操作
	Select case (actionType)
		case "check": 	
			checkStudent()				
		case "delete":	
			deleteStudent()			
		case "change":
			changeStudent()			
	end Select
	
	'通过审核指定学号的学生信息
	Sub checkStudent()
		sql = "update student set sCheck = 1 where ID = '"
		sql = sql & studentID & "'"
		ExecuteNonQuery(sql)
		Alert("该学生信息已通过审核，请继续其他操作！")
		Go("listUnCheckedStudent.asp") 
	end Sub	
	
	'删除指定学号的学生信息
	Sub deleteStudent()
		sql = "delete from student where ID = '" & studentID & "'"
		ExecuteNonQuery(sql)
		Alert("成功删除学号为 " & studentID & " 的学生所有信息")
		Go("welcome.htm")
	End Sub
	'修改指定学号的学生信息
	Sub changeStudent()
		'定义变量
		dim studentID
		dim studentName
		dim studentPassword
		dim studentGrade
		dim studentSex
		dim studentPhone
		dim studentEmail
		dim studentAddress
		dim sql
		dim rs
	
		'将表单里面的值取出赋给对应的变量
		studentID = Trim(Request.Form("studentID"))
		studentName = Trim(Request.Form("studentName"))
		studentPassword = Trim(Request.Form("studentPassword"))
		studentGrade = Trim(Request.Form("studentGrade"))
		studentSex = Request.Form("studentSex")
		studentPhone = Trim(Request.Form("studentPhone"))
		studentEmail = Trim(Request.Form("studentEmail"))
		studentAddress = Trim(Request.Form("studentAddress"))
		
		'信息完整性检查
		if(studentID = "" or studentName = "" or studentGrade = "") then
			Alert("对不起，请填充所有必填字段后再提交！")
			GoBack()
			Response.End
		end if
		
		'检查用户输入的确认密码和密码是否一致
		if(studentPassword <> Trim(Request.Form("studentPasswordChk"))) then
			Alert("对不起，确认密码不正确，请查实后再提交！")
			GoBack()
			Response.End
		end if
		
		'过滤非法字符
		studentID = CheckStr(studentID)
		
		'更新学生信息到数据库中
		sql = "update student set sName = '"
		sql = sql & studentName & "',sGrade = '"
		sql = sql & studentGrade & "',sSex = '"
		sql = sql & studentSex & "',sEmail = '"
		sql = sql & studentEmail & "',sPhone = '"
		sql = sql & studentPhone & "',sAddress = '"
		
		if(studentPassword <> "") then
			'加密密码
			studentPassword = md5(studentPassword)
			sql = sql & studentAddress & "',sPassword = '"
		end if
		
		sql = sql & studentPassword & "' where ID = '"
		sql = sql & studentID & "'"
		ExecuteNonQuery(sql)
		
		Alert("成功修改学号为 " & studentID & " 的学生信息，请继续其他操作！")
		Go("welcome.htm")
	End Sub
%>