usermodify.asp

一篇不错的好论文

<%@LANGUAGE="VBSCRIPT"%> 
<!--#include file="Connections/StudentConn.asp" -->
<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers="1"
MM_authFailedURL="Login.asp"
MM_grantAccess=false
If Session("MM_UserName") <> "" Then
  If (false Or CStr(Session("MM_UserAuthorization"))="") Or _
         (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = "?"
  If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
  MM_referrer = Request.ServerVariables("URL")
  if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
  MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%>
<%
' *** Edit Operations: declare variables

MM_editAction = CStr(Request("URL"))
If (Request.QueryString <> "") Then
  MM_editAction = MM_editAction & "?" & Request.QueryString
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_StudentConn_STRING
  MM_editTable = "User"
  MM_editColumn = "id"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = "UserManage.asp"
  MM_fieldsStr  = "UserName|value|password|value|accesslevel|value"
  MM_columnsStr = "UserName|',none,''|password|',none,''|accesslevel|none,none,NULL"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(i+1) = CStr(Request.Form(MM_fields(i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql update statement
  MM_editQuery = "update " & MM_editTable & " set "
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    FormVal = MM_fields(i+1)
    MM_typeArray = Split(MM_columns(i+1),",")
    Delim = MM_typeArray(0)
    If (Delim = "none") Then Delim = ""
    AltVal = MM_typeArray(1)
    If (AltVal = "none") Then AltVal = ""
    EmptyVal = MM_typeArray(2)
    If (EmptyVal = "none") Then EmptyVal = ""
    If (FormVal = "") Then
      FormVal = EmptyVal
    Else
      If (AltVal <> "") Then
        FormVal = AltVal
      ElseIf (Delim = "'") Then  ' escape quotes
        FormVal = "'" & Replace(FormVal,"'","''") & "'"
      Else
        FormVal = Delim + FormVal + Delim
      End If
    End If
    If (i <> LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery & ","
    End If
    MM_editQuery = MM_editQuery & MM_columns(i) & " = " & FormVal
  Next
  MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the update
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
Dim Recordset1__MMColParam
Recordset1__MMColParam = "1"
set Recordset1 = Server.CreateObject("ADODB.Recordset")
Recordset1.ActiveConnection = MM_StudentConn_STRING

if (Request.QueryString("id") <> "") then
  Recordset1__MMColParam = Request.QueryString("id")
  Recordset1.Source = "SELECT * FROM User WHERE id = " + Replace(Recordset1__MMColParam, "'", "''") + ""
elseif (Request.QueryString("UserName") <> "") then
  Recordset1__MMColParam = Request.QueryString("UserName")
  Recordset1.Source = "SELECT * FROM User WHERE UserName = '" + Replace(Recordset1__MMColParam, "'", "''") + "'"
end if

Recordset1.CursorType = 0
Recordset1.CursorLocation = 2
Recordset1.LockType = 3
Recordset1.Open()
Recordset1_numRows = 0
%>
<%
Dim Repeat1__numRows
Repeat1__numRows = -1
Dim Repeat1__index
Repeat1__index = 0
Recordset1_numRows = Recordset1_numRows + Repeat1__numRows
%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!-- saved from url=(0048)http://www.cjol.com/headhunting/addexcellent.asp -->
<HTML>
<HEAD>
<TITLE>用户管理&gt;&gt;用户信息修改</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 6.00.2600.0" Name=GENERATOR>
<link href="home.css" rel="stylesheet" type="text/css">
<script language="JavaScript">
function checkpwd(){
if(document.form1.UserName.value=="")
  {
   alert("用户名不能为空！");
   document.form1.UserName.focus();
   return false;
   }
if(document.form1.password.value=="")
   {
   alert("密码不能为空！");
   document.form1.password.focus();
   return false;
   }

if (document.form1.password.value != document.form1.confirmpwd.value)
  {
    alert("两次输入的密码不一样！");
    document.form1.confirmpwd.focus();
    return false;
  }
}
</script>
</HEAD>
<BODY text=#000000 bgColor=#ffffff leftMargin=0 topMargin=0>
<!--#include file="Top.asp"-->
<TABLE cellSpacing=0 cellPadding=0 width=750 align=center border=0>
  <TBODY> 
  <TR> 
    <TD vAlign=top width=46 background=images/p_left_2.gif></TD>
    <TD height="200" width="116" align="center"><font size="5"><b>用<br>
      户<br>
      管<br>
      理</b></font></TD>
    <TD height="200" width="588"> 
      <% If Not Recordset1.EOF Or Not Recordset1.BOF Then %>
      <br>
      <br>
      <font color="#FF0000"><b>修改考试信息：<br>
      </b></font><br>
      <form  Name="form1" onsubmit="return checkpwd()" ACTION="<%=MM_editAction%>" METHOD="POST">
        <table width="300" border="0" cellspacing="0" cellpadding="0">
          <tr> 
            <td height="30" align="right">用户名：</td>
            <td height="30"> 
              <input type="text" Name="UserName" value="<%=(Recordset1.Fields.Item("UserName").Value)%>">
            </td>
          </tr>
          <tr> 
            <td height="30" align="right">密&nbsp;&nbsp;码：</td>
            <td height="30"> 
              <input type="password" Name="password" value="<%=(Recordset1.Fields.Item("password").Value)%>">
            </td>
          </tr>
          <tr> 
            <td height="30" align="right">确认密码：</td>
            <td height="30"> 
              <input type="password" Name="confirmpwd" value="<%=(Recordset1.Fields.Item("password").Value)%>">
            </td>
          </tr>
          <tr> 
            <td height="30" align="right">用户权限：</td>
            <td height="30"> 
              <select Name="accesslevel">
                <option value="1">管理员</option>
                <option value="2" selected>普通用户</option>
              </select>
            </td>
          </tr>
          <tr align="center"> 
            <td height="30" colspan="2"> 
              <input type="submit" Name="Submit" value="保存修改结果">
            </td>
          </tr>
        </table>
        <input type="hidden" Name="MM_update" value="true">
        <input type="hidden" Name="MM_recordId" value="<%= Recordset1.Fields.Item("id").Value %>">
      </form>
      <br>
      <% End If ' end Not Recordset1.EOF Or NOT Recordset1.BOF %>
      <% If Recordset1.EOF And Recordset1.BOF Then %>
      <p align="center"><br>
        <br>
        没有任何用户，请添加用户！<br>
        <br>
      </p>
      <% End If ' end Recordset1.EOF And Recordset1.BOF %>
    </TD>
  </TR>
  </TBODY> 
</TABLE>
<!--#include file="CopyRight.asp"-->
</BODY>
</HTML>
<%
Recordset1.Close()
%>