dealdelete.jsp

课程设计中的在线书店源码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*"%>
<%@ include file="check.jsp"%>
<jsp:useBean id="conn" class="dbBean.DBBean" scope="session"/>
<%
	String logrank="";
	String logid="";
	String boardid="";
	String aid="";
	String reid="";
	ResultSet rs=null;
	if(session.getAttribute("rank")!=null)
		logrank=(String)session.getAttribute("rank");
	if(session.getAttribute("id")!=null)
		logid=(String)session.getAttribute("id");
	if(session.getAttribute("boardid")!=null)
		boardid=(String)session.getAttribute("boardid");
	String delid="0";
	if(request.getParameter("delid")!=null)
		delid=request.getParameter("delid");
	String sql="select authorID,reID from article where id="+delid;
	rs=conn.executeQuery(sql);
	if(rs.next())
	{
		aid=rs.getString(1);
		reid=rs.getString(2);
	}
	rs.close();
	if(!logrank.equals("4")&&!logrank.equals(boardid)&&!aid.equals(logid))
		response.sendRedirect("error.jsp");
else{
	sql="select authorID from article where reID="+delid;
	rs=conn.executeQuery(sql);
	while(rs.next())
	{
		sql="update user set pubnum=pubnum-1 where userid="+rs.getString(1);
		conn.executeUpdate(sql);
	}
	rs.close();
	sql="delete from article where reID="+delid;
	conn.executeUpdate(sql);
	sql="delete from article where id="+delid;
	conn.executeUpdate(sql);
	sql="update article set reNum=reNum-1 where id="+reid;
	conn.executeUpdate(sql);
	sql="update user set pubnum=pubnum-1 where userid="+aid;
	conn.executeUpdate(sql);
	conn.close();
	String bid=(String)session.getAttribute("boardid");
	if(reid==null||reid.equals("")||reid.equals("0"))
		response.sendRedirect("board.jsp?boardid="+bid);	
	else
		response.sendRedirect("detail.jsp?id="+reid);
}
%>