admin_master.asp

网络办公系统源码

<!--#include file="../../config.asp"-->
<!--#include file="../checklogin.asp"-->
<!--#include file="../../inc/md5/ss_md5.asp"-->
<LINK href="style.css" type=text/css rel=stylesheet>
<%
AdminName=session("AdminName")
Call Admin_header()
if  ChkAdmin(999)=False then
   call message("您没有 管理员管理 权限","back")
   call endexit()
end if
Dim selAdminID
Dim i,Action,strClass
Response.Write "<table cellpadding=2 cellspacing=1 border=0 class=tableBorder align=center>" & vbCrLf
Response.Write " <tr>" & vbCrLf
Response.Write " <th height=22 colspan=6>管理员操作</th>" & vbCrLf
Response.Write " </tr>" & vbCrLf
Response.Write " <tr>" & vbCrLf
Response.Write " <td class=TableRow1> <b>管理选项：</b> <a href=admin_master.asp>管理首页</a> &nbsp;<a href=admin_master.asp?action=add>添加管理员</a>"
Response.Write " </td>" & vbCrLf
Response.Write " </tr>" & vbCrLf
Response.Write " </table><br>" & vbCrLf
Action = LCase(Request("action"))
Select Case Trim(Action)
Case "renew"
	Call UpdateFlag
Case "del"
	Call del
Case "pasword"
	Call pasword
Case "newpass"
	Call newpass
Case "add"
	Call addadmin
Case "edit"
	Call userinfo
Case "savenew"
	Call savenew
Case "active"
	Call ActiveLock
Case Else
	Call userlist
End Select
CloseConn

Private Sub userlist()
	Response.Write "<table cellpadding=""2"" cellspacing=""1"" border=""0"" class=""tableBorder"" align=center>" & vbCrLf
	Response.Write " <tr>" & vbCrLf
	Response.Write " <th height=22 colspan=6>管理员管理(点击用户名进行操作)</th>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	Response.Write " <tr align=center>" & vbCrLf
	Response.Write "<td height=22 class=TableTitle><B>用户名</B></td>" & vbCrLf
	Response.Write "<td class=TableTitle><B>上次登陆时间</B></td>" & vbCrLf
	Response.Write "<td class=TableTitle><B>上次登陆IP</B></td>" & vbCrLf
	Response.Write "<td class=TableTitle><B>操作</B></td>" & vbCrLf
	Response.Write "<td class=TableTitle><B>状态</B></td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	Set Rs = ExeSql("select * from oa_admin where companyid="&session("companyid")&" order by Logintime desc")
	i = 0
	Do While Not Rs.EOF
		If (i mod 2) = 0 Then
			strClass = "class=TableRow1"
		Else
			strClass = "class=TableRow2"
		End If
		Response.Write " <tr>" & vbCrLf
		Response.Write " <td " & strClass & "><a href=""?id="
		Response.Write Rs("id")
		Response.Write "&action=pasword"" title='点击此处修改管理员信息'>"
		Response.Write Rs("username")
		Response.Write "</a></td>" & vbCrLf
		Response.Write "<td align=center " & strClass & ">"
		Response.Write Rs("Logintime")
		Response.Write "</td>" & vbCrLf
		Response.Write "<td align=center " & strClass & ">"
		Response.Write Rs("Loginip")
		Response.Write "</td>" & vbCrLf
		Response.Write "<td align=center " & strClass & "><a href=""?action=Active&id=" & Rs("id") & "&lock="
		If Rs("isLock") = 0 Then
			Response.Write "1"" onclick=""return confirm('您确定要锁定此管理员吗?')"">锁定管理员</a> | "
		Else
			Response.Write "0"" onclick=""return confirm('您确要激活此管理员吗?')"">激活管理员</a> | "
		End If
		if Session("AdminID")<>rs("id") then
		Response.Write "<a href=""?action=del&id="
		Response.Write Rs("id")
		Response.Write "&name="
		Response.Write Rs("username")
		Response.Write """ onclick=""return confirm('此操作将删除该管理员\n 您确定执行此操作吗?')"">删除</a>&nbsp;|&nbsp;"& vbCrLf
		else
		response.Write "<font color=#B7B7B7>删除</font>"&"&nbsp;|&nbsp;"& vbCrLf
		end if
		response.Write"<a href=""userqx.asp?id="& vbCrLf
		Response.Write Rs("id")
		Response.Write """>编辑权限</a></td>" & vbCrLf
		
		Response.Write "<td align=center " & strClass & ">"
		If Rs("isLock") = 0 Then
			Response.Write "正常"
		Else
			Response.Write "<font color=red>锁定<font>"
		End If
		Response.Write "</td>" & vbCrLf
		Response.Write " </tr>" & vbCrLf
		Rs.movenext
		i = i + 1
	Loop
	Rs.Close
	Set Rs = Nothing
	Response.Write " <tr>" & vbCrLf
	Response.Write " <td colspan=""6"" align=center Class=TableRow1>" & vbCrLf
	Response.Write " <input class=""button"" type=button name=""Submit"" value=""添加管理员"" onClick=""self.location='admin_master.asp?action=add'"" >" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	Response.Write " </table>" & vbCrLf
End Sub

Private Sub del()
	If Trim(Request("id")) <> "" Then
		ExeSql ("delete from oa_admin where username<>'" & AdminName & "' And id=" & Request("id"))
		Response.Redirect (Request.ServerVariables("HTTP_REFERER"))
	Else

		 Call Message ( "错误的系统参数","back")
		 Call EndExit()
	End If
End Sub

Private Sub ActiveLock()
	If Trim(Request("lock")) <> "" And Trim(Request("id")) <> "" Then
		ExeSql ("update oa_admin set isLock="&Request("lock")&" where username<>'" & AdminName & "' And id=" & Request("id"))
		Response.Redirect (Request.ServerVariables("HTTP_REFERER"))
	Else

		 Call Message ( "错误的系统参数","back")
		 Call EndExit()
	End If
End Sub

Private Sub pasword()
	Dim oldpassword
	Set Rs = ExeSql("select * from oa_admin where id=" & Request("id"))
	oldpassword = Rs("password")
	Response.Write "<table cellpadding=""2"" cellspacing=""1"" border=""0"" class=""tableBorder"" align=center>" & vbCrLf
	Response.Write "<form action=""?action=newpass"" method=post>" & vbCrLf
	Response.Write " <tr>" & vbCrLf
	Response.Write " <th colspan=2 height=23>管理员资料管理－－密码修改" & vbCrLf
	Response.Write " </th>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	'----------------------------------------------------------------------------------------
	Response.Write " <tr >" & vbCrLf
	Response.Write " <td width=""26%"" align=""right"" class=tablerow1>姓名：</td>" & vbCrLf
	Response.Write " <td width=""74%"" class=tablerow1>" & vbCrLf
	Response.Write " <input type=text size=25 name=""truename"" value="""
	Response.Write trim(Rs("truename"))
	Response.Write """>" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
'--------------------------------------------------------------------------------------------
	Response.Write " <tr >" & vbCrLf
	Response.Write " <td width=""26%"" align=""right"" class=tablerow1>所在部门：</td>" & vbCrLf
	Response.Write " <td width=""74%"" class=tablerow1>" & vbCrLf
	Response.Write " <select name=""departid"">" & vbCrLf
	Response.Write " <option value="&Rs("departid")&" selected>" & vbCrLf
	depname=conn.execute("select departname from oa_depart where id="&rs("departid"))(0)
	Response.Write depname& vbCrLf
	Response.Write " </option>" & vbCrLf

	SQL = "SELECT * FROM oa_depart where companyid="&session("companyid")&" ORDER BY id desc"
	Set RsObj = conn.execute(SQL)
	Do While Not RsObj.EOF
	Response.Write " <option value="&RsObj("id")&">" & vbCrLf
		Response.Write RsObj("departname")& vbCrLf
	Response.Write " </option>" & vbCrLf
	RsObj.movenext
		Loop
	RsObj.Close
	Response.Write " </select>" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
'---------------------------------------------------------------------------------------------------
	Response.Write " <tr >" & vbCrLf
	Response.Write " <td width=""26%"" align=""right"" class=tablerow1>直接上级：</td>" & vbCrLf
	Response.Write " <td width=""74%"" class=tablerow1>" & vbCrLf
	Response.Write " <select name=""parentid"">" & vbCrLf
	Response.Write " <option value="&Rs("parentid")&" selected>" & vbCrLf
	if cint(trim(rs("parentid")))=0 then
		parentname="无上级"
	else
		set prs=conn.execute("select id from oa_admin where companyid="&session("companyid"))
			do while not prs.eof
				parentname=conn.execute("select truename from oa_admin where  id="&rs("parentid")&"")(0)
			prs.movenext
			loop
			prs.close
	end if
	Response.Write parentname& vbCrLf
	Response.Write " </option>" & vbCrLf

	Response.Write " <option value=""0"">无上级</option>" & vbCrLf
	SQL = "SELECT id,truename FROM oa_admin where companyid="&session("companyid")&" ORDER BY id desc"
	Set RsObj = conn.execute(SQL)
	Do While Not RsObj.EOF
	Response.Write " <option value="&RsObj("id")&">" & vbCrLf
		Response.Write RsObj("truename")& vbCrLf
	Response.Write " </option>" & vbCrLf
	RsObj.movenext
		Loop
	RsObj.Close
	Response.Write " </select>" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
'-----------------------------------------------------------------------------------------------------

	Response.Write " <tr >" & vbCrLf
	Response.Write " <td width=""26%"" align=""right"" class=tablerow1>后台登陆名称：</td>" & vbCrLf
	Response.Write " <td width=""74%"" class=tablerow1>" & vbCrLf
	Response.Write " <input type=hidden name=""oldusername"" value="""
	Response.Write Rs("username")
	Response.Write """>" & vbCrLf
	Response.Write " <input type=text size=25 name=""username2"" value="""
	Response.Write Rs("username")
	Response.Write """>" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	Response.Write " <tr >" & vbCrLf
	Response.Write " <td width=""26%"" align=""right"" class=tablerow1>后台登陆密码：</td>" & vbCrLf
	Response.Write " <td width=""74%"" class=tablerow1>" & vbCrLf
	Response.Write " <input type=""password"" size=25 name=""password2"">"
	Response.Write " (如果不修改密码请留空)" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	Response.Write " <tr>" & vbCrLf
	Response.Write " <td width=""26%"" align=""right"" class=tablerow1>管理员级别：</td>" & vbCrLf
	Response.Write " <td width=""74%"" class=tablerow1>" & vbCrLf
	Response.Write " <input type=radio name=AdminGrade value='0' "
	If Rs("AdminGrade") = 0 Then Response.Write " checked"
	Response.Write " > 普通管理员&nbsp;&nbsp;" & vbCrLf
	Response.Write " <input type=radio name=AdminGrade value='999' "
	If Rs("AdminGrade") = 999 Then Response.Write " checked"
	Response.Write " > 高级管理员 （拥有最高权限）" & vbCrLf
	Response.Write " </td>" & vbCrLf
	Response.Write " </tr>" & vbCrLf
	Response.Write " <tr>" & vbCrLf
	Response.Write " <td align=""right"" class=tablerow1>是否激活管理员：</td>" & vbCrLf
	Response.Write " <td class=tablerow1>" & vbCrLf
	Response.Write " <input type=radio name=isLock value='1' "
	If Rs("isLock") = 1 Then Response.Write " checked"