advancesearch.asp

OA企业智能办公自动化系统边缘特别版 功能非常强大的OA系统 1.仿WINDOWS操作界面

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<%
Option Explicit
Response.Buffer = True
Response.Expires = 0
Response.Expiresabsolute = Now() - 1 
Response.AddHeader "pragma","no-cache" 
Response.AddHeader "cache-control","private" 
Response.CacheControl = "no-cache"
%>
<!--#include file="Connections/conn.asp" -->

<!--登录权限判断，Session和MD5加密判断-->
<%
Rem Session("CRM_account") 用户帐号
Rem Session("CRM_name") 用户名
Rem Session("CRM_level") 用户等级

If Session("CRM_account") = "" Or Session("CRM_name") = "" Or Session("CRM_level") <= 0 Then Response.Redirect("login.asp")

Dim action
action = Trim(Request("action"))
If action = "killSession" Then Session("CRM_sql") = ""

Dim strCounter,strToPrint

Function getGroupName(gId)
    If gId = "" Then
	    getGroupName = ""
	Else
	    Dim rs
		Set rs = Server.CreateObject("ADODB.Recordset")
		rs.Open "Select * From baidu_group Where gId = " & gId,conn,3,1
		If rs.RecordCount <> 1 Then
		    getGroupName = ""
		Else
		    getGroupName = rs("gName")
		End If
		rs.Close
		Set rs = Nothing
	End If
End Function

Function getGroup(gName)
    If gName = "" Then
	    getGroup = 0
	Else
	    Dim rs
		Set rs = Server.CreateObject("ADODB.Recordset")
		rs.Open "Select * From baidu_group Where gName = '" & gName & "'",conn,3,1
		If rs.RecordCount <> 1 Then
		    getGroup = 0
		Else
		    getGroup = rs("gId")
		End If
		rs.Close
		Set rs = Nothing
	End If
End Function

Function getUserList(intLevel,intGroup)
    Dim rs,strUserList
	strUserList = "'" & Session("CRM_name") & "'"
	Set rs = Server.CreateObject("ADODB.Recordset")
	rs.Open "Select * From baidu_user Where uLevel < " & intLevel & " And uGroup = " & intGroup,conn,3,1
	Do While Not rs.BOF And Not rs.EOF
	    If strUserList = "" Then
		    strUserList = "'" & rs("uName") & "'"
		Else
		    strUserList = strUserList & ",'" & rs("uName") & "'"
		End If
		rs.MoveNext
	Loop
	rs.Close
	Set rs = Nothing
	getUserList = strUserList
End Function

''生成下拉列表
Function getList(i,sTable,iId,sValue,sName,selfValue)
    If i < 1 Or i > 2 Then
	    getList = ""
		Exit Function
	End If
	Dim strList
	Dim rs
	If i = 1 Then
	    strList = "<select name=""" & sName & """ selfValue=""" & selfValue & """>"
		strList = strList & "<option value="""">请选择</option>"
		Set rs = Server.CreateObject("ADODB.Recordset")
		rs.Open "Select * From " & sTable & "",conn,3,1
		Do While Not rs.BOF And Not rs.EOF
		    strList = strList & "<option value=""" & rs(sValue) & """>" & rs(sValue) & "</option>"
			rs.MoveNext
		Loop
		rs.Close
		Set rs = Nothing
		strList = strList & "</select>"
		getList = strList
	Else
	    strList = "<select name=""" & sName & """ selfValue=""" & selfValue & """>"
		strList = strList & "<option value="""">请选择</option>"
		Set rs = Server.CreateObject("ADODB.Recordset")
		rs.Open "Select * From " & sTable & "",conn,3,1
		Do While Not rs.BOF And Not rs.EOF
		    strList = strList & "<option value=""" & rs(iId) & """>" & rs(sValue) & "</option>"
			rs.MoveNext
		Loop
		rs.Close
		Set rs = Nothing
		strList = strList & "</select>"
		getList = strList
	End If
End Function

Dim subAction
subAction = Trim(Request("subAction"))

If subAction = "searchItem" Then
    Dim cCompany,cLinkman,cHomepage
	Dim cTel,cEmail,cAddress
	Dim cArea,cSquare,cType
	Dim cTrade,cUser,cGroup
	Dim arrUser
	cCompany = Trim(Request("company"))
	cLinkman = Trim(Request("linkman"))
	cHomepage = Trim(Request("homepage"))
	cTel = Trim(Request("tel"))
	cEmail = Trim(Request("email"))
	cAddress = Trim(Request("address"))
	cArea = Trim(Request("area"))
	cSquare = Trim(Request("square"))
	cType = Trim(Request("type"))
	cTrade = Trim(Request("trade"))
	cUser = Trim(Request("user"))
	cGroup = Request("group")
	If cGroup <> "" Then
	    cGroup = CInt(Abs(cGroup))
	End If
	
	Dim sql
    sql = ""
    If cCompany <> "" Then
        If sql = "" Then
            sql = sql & " Where cCompany Like '%" & cCompany & "%'"
	    Else
	        sql = sql & " And cCompany Like '%" & cCompany & "%'"
        End If
	End If
	
	
    If cLinkman <> "" Then
        If sql = "" Then
            sql = sql & " Where cLinkman Like '%" & cLinkman & "%'"
	    Else
	        sql = sql & " And cLinkman Like '%" & cLinkman & "%'"
        End If
	End If
	
	
    If cHomepage <> "" Then
        If sql = "" Then
            sql = sql & " Where cHomepage Like '%" & cHomepage & "%'"
	    Else
	        sql = sql & " And cHomepage Like '%" & cHomepage & "%'"
        End If
	End If
	
	If cTel <> "" Then
        If sql = "" Then
            sql = sql & " Where cTel Like '%" & cTel & "%'"
	    Else
	        sql = sql & " And cTel Like '%" & cTel & "%'"
        End If
	End If
	
    If cEmail <> "" Then
        If sql = "" Then
            sql = sql & " Where cEmail Like '%" & cEmail & "%'"
	    Else
	        sql = sql & " And cEmail Like '%" & cEmail & "%'"
        End If
	End If
	
    If cAddress <> "" Then
        If sql = "" Then
            sql = sql & " Where cAddress Like '%" & cAddress & "%'"
	    Else
	        sql = sql & " And cAddress Like '%" & cAddress & "%'"
        End If
	End If
	
    If cArea <> "" Then
        If sql = "" Then
            sql = sql & " Where cArea = '" & cArea & "'"
	    Else
	        sql = sql & " And cArea = '" & cArea & "'"
        End If
	End If
	
    If cSquare <> "" Then
        If sql = "" Then
            sql = sql & " Where cSquare = '" & cSquare & "'"
	    Else
	        sql = sql & " And cSquare = '" & cSquare & "'"
        End If
	End If
	
    If cType <> "" Then
        If sql = "" Then
            sql = sql & " Where cType = '" & cType & "'"
	    Else
	        sql = sql & " And cType = '" & cType & "'"
        End If
	End If
	
    If cTrade <> "" Then
        If sql = "" Then
            sql = sql & " Where cTrade = '" & cTrade & "'"
	    Else
	        sql = sql & " And cTrade = '" & cTrade & "'"
        End If
	End If
		
	If cGroup <> "" And IsNumeric(cGroup) Then
        If sql = "" Then
            sql = sql & " Where cGroup = " & cGroup
	    Else
	        sql = sql & " And cGroup = " & cGroup
        End If
	End If
	
	If Session("CRM_level") < 9 Then
        If cUser <> "" Then
    	    arrUser = Split(getUserList(Session("CRM_level"),Session("CRM_group")),",")
	        Dim k,flag
	        flag = 0
    	    For k = 0 To UBound(arrUser) - 1
    	        If Replace(arrUser(k),"'","") = cUser Then
    		        flag = 1
    		    	Exit For
    		    End If
    	    Next
            If flag = 1 Then
                If sql = "" Then
                    sql = sql & " Where cUser = '" & cUser & "'"
    	        Else
    	            sql = sql & " And cUser = '" & cUser & "'"
                End If
    		Else
    		    If sql = "" Then
                    sql = sql & " Where cUser = '权限不允许的用户'"
    	        Else
    	            sql = sql & " And cUser = '权限不允许的用户'"
                End If
    	    End If
    	Else
    	    If sql = "" Then
                sql = sql & " Where cUser In (" & getUserList(Session("CRM_level"),Session("CRM_group")) & ")"
    	    Else