adminmanage_inc.asp

来自「网店批发系统,很好很强大,很好很强大很好很强大」· ASP 代码 · 共 67 行

<%
	dim i,j,rs,action,AdminID,AdminName,AdminPass,AdminFlag,act
	dim Admin,AdminType,AdminTypeNum,ChgType,AdminLevel,Pass
	
	i = 0
	action = sqlchg(Request.QueryString("action"))
	act = sqlchg(Request.QueryString("act"))
	AdminID = Cint(sqlcheck(Request.QueryString("ID")))
	AdminName = sqlchg(Request.Form("AdminName"))
	AdminFlag = sqlcheck(Request.Form("AdminFlag"))
	AdminPass = sqlchg(Request.Form("AdminPass"))
	Pass = sqlchg(Request.Form("Pass"))
	
	if action = "add" then
	call CheckType(13)
		if AdminFlag = 0 then
			conn.execute("Insert into Administrator (AdminUserName,AdminPassWord,AdminFlag,adminType) values ('"&AdminName&"','"&md5(AdminPass)&"','"&AdminFlag&"','1,1,1,1,1,1,1,1,1,1,1,1,0,0,0,0,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,')")
		else
			conn.execute("Insert into Administrator (AdminUserName,AdminPassWord,AdminFlag,adminType) values ('"&AdminName&"','"&md5(AdminPass)&"','"&AdminFlag&"','1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,')")	
		end if
		Response.Write("<script language='javascript'>alert('操作成功');window.location.href='AdminManage.asp';</script>")
		Response.End()
	end if

	if action = "del" then
		call CheckType(15)	
		'保证不能删除最后一个超级管理员
		set rs = conn.execute("Select AdminFlag from Administrator where AdminID = "&AdminID&"")
		if rs(0) = 1 then
			set rs = conn.execute("Select count(*) from Administrator where AdminFlag = 1")
			if rs(0) < 2 then
				Response.Write("<script language='javascript'>alert('您的系统不能没有超级管理员');window.location.href='AdminManage.asp';</script>")
				Response.End()
			end if
		end if
		conn.execute("Delete from Administrator where AdminID = "&AdminID&"")
		Response.Write("<script language='javascript'>alert('操作成功');window.location.href='AdminManage.asp';</script>")
		Response.End()
	end if
	
	if action = "edit" then
		call CheckType(14)	
		if act = "pass" then
			conn.execute("Update Administrator set adminPassword = '"&md5(Pass)&"' where AdminID = "&Cint(AdminID)&"")
			Response.Write("<script language='javascript'>alert('操作成功');window.location.href='AdminManage.asp';</script>")
			Response.End()
		end if	
		if act = "save" then
			for i = 0 to 40
				ChgType = ChgType&set0(Request.Form("AdminType"&i&""))&","
			next
			conn.execute("Update Administrator set adminType = '"&ChgType&"' where AdminID = "&Cint(AdminID)&"")
			Response.Write("<script language='javascript'>alert('操作成功');window.location.href='AdminManage.asp';</script>")
			Response.End()
		end if
		set rs = conn.execute("Select adminType,adminFlag from Administrator where AdminID = "&Cint(AdminID)&"")
		'读权限
		AdminType = rs(0)
		AdminType = split(AdminType,",")
		AdminLevel = rs(1)
	end if

	call CheckType(12)		
	set rs = conn.execute("select adminID,adminUsername,adminFlag,adminLastLoginDate from Administrator order by adminID")
	Admin = rs.getrows
	i = ubound(Admin,2)
%>