dll.asp

学校网站管理系统

if request.querystring("id")="" then
response.Write "<script language=javascript>alert('您好！您执行了非法操作！');this.location.href='index.asp';</script>"
Response.End
else
if not isInteger(request.querystring("id")) then
response.Write "<script language=javascript>alert('您提交的参数有误！');this.location.href='index.asp';</script>"
Response.End
end if
end if
end sub
'◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆
'◆过程名：YC_user                 ◇
'◇功  能：统计会员排行            ◆
'◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇
sub YC_user()
sql="select * from YC_user order by user_all desc"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
i=0
do while not rs.eof%>
<table border=0 width='100%' cellspacing='0' cellpadding='0'><tr>
<td height=17>&nbsp;<img src=img/usertitle.gif align=absmiddle border=0 width=15 height=15>&nbsp;<%if len(rs("user_name"))>10 then response.Write left(rs("user_name"),10)&"..." else response.Write rs("user_name") end if%></font></a>
</td><td width=40 align=center><%=rs("user_all")%></td></tr></table>
<%
i=i+1
if i>=6 then exit do end if
rs.movenext
loop
if rs.eof and rs.bof then
Response.Write "<center><font color=red><b>本站提示：暂时没有会员！</b></font></center>"
end if
rs.close
set rs=nothing
end sub
'◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆
'◆函数名：hacker                  ◇
'◇功  能：防止黑客攻击（后台）    ◆
'◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇
sub hacker()
myurl=lcase(trim(request.ServerVariables("HTTP_REFERER")))
if myurl="" then
response.write "<script>alert('对不起，为了系统安全，不允许直接输入地址访问本系统的后台管理页面。');</script>"
response.write "<script>location.href='index.asp';</script>"
Response.End
else
outurl=trim("http://" & Request.ServerVariables("SERVER_NAME"))
if mid(myurl,len(outurl)+1,1)=":" then
outurl=outurl & ":" & Request.ServerVariables("SERVER_PORT")
end if
outurl=lcase(outurl & request.ServerVariables("SCRIPT_NAME"))
if lcase(left(myurl,instrrev(myurl,"/")))<>lcase(left(outurl,instrrev(outurl,"/"))) then
response.write "<script>alert('对不起，为了系统安全，不允许从外部链接地址访问本系统的后台管理页面。')</script>"
response.write "<script>location.href='index.asp';</script>"
Response.End
end if
end if
end sub
'◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆
'◆函数名：page                    ◇
'◇功  能：前台翻页                ◆
'◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇◆◇
sub page(one,two)
YCMS("<form name='form007' method='post' action=''")
response.write "&emsp;&emsp;共有"&one&"<font color=red>"&rs.recordcount&"</font>"&two&"，每页<font color=red>"&rs.pagesize&"</font>"&two&"，分<font color=red>"&mypage&"</font>/"&rs.pagecount&"页&emsp;&emsp;&emsp;"
%>
<script language="javascript">
function showPageLink(sUrl,iPage,iCount){
var i;
i=Math.max(1,iPage-1);
document.write("<a href=\""+sUrl+"1\"><FONT face=Webdings>9</FONT></a> ");
document.write("<a href=\""+sUrl+i+"\"><FONT face=Webdings>7</FONT></a> <b>");
for(i=Math.max(1,iPage-5);i<iPage;i++){
document.write("<a href=\""+sUrl+i+"\">"+i+"</a> ");}
document.write("<font color='#ff3333'>"+iPage+"</font> ");
for(i=iPage+1;i<=Math.min(iCount,iPage+5);i++){
document.write("<a href=\""+sUrl+i+"\">"+i+"</a> ");}
i=Math.min(iCount,iPage+1);
document.write("</b><a href=\""+sUrl+i+"\"><FONT face=Webdings>8</FONT></a> ");
document.write("<a href=\""+sUrl+iCount+"\"><FONT face=Webdings>:</FONT></a> ");}
showPageLink("?action=list&class=<%=request("class")%>&page=",<%=mypage%>,<%=pages%>);
</script>
<%
YCMS("&nbsp;&nbsp;<select name='page'>")
i=1
for i=1 to pages
if i=mypage then
YCMS("<option value="&i&" selected>第"&i&"页</option>") 
else
YCMS("<option value="&i&">第"&i&"页</option>") 
end if
next
YCMS("</select>&nbsp;<input type='submit' name='YCMSpage' value='转向' class='yecao'></form>")
if request.Form("YCMSpage")<>"" then
YCGO("?action=list&class="&request("class")&"&page="&request.Form("page")&"")
end if
end sub
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台分类显示调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub alltype(lmname,cnname)
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname&" where class=0"
rs.open sql,conn,1,3
response.Write "<table width='500' align='center' border='0' cellpadding='0' cellspacing='0' rules='none' class='3d'>"
response.Write "<tr><td height=22  class=title colspan=2><b>&nbsp;<img src=img/ie.gif border=0 width=15 height=15 align=absMiddle>&nbsp;"&cnname&"分类管理</b></td></tr>"
if not rs.bof and not rs.eof then
do while not rs.eof
set rs1=server.CreateObject("adodb.recordset")
sql1="select * from "&lmname&" where class="&rs("id")&""
rs1.open sql1,conn,1,3
response.Write "<tr><td class='hr' colspan='2'></td></tr><tr class=bg><td height=25><font color=blue>"
response.Write "&nbsp;<b>√</b>&nbsp;"&rs("classname")&"&nbsp;[<a href=?action=addtype2&id="&rs("id")&"><font color=blue>新建子分类</font></a>]</font></td>"
response.Write "<td height=24 align='center'><a href=?action=edittype&id="&rs("id")&"><font color=blue>修改</font></a>&nbsp;&nbsp;<a href=?action=deltype&id="&rs("id")&" onclick=mybox('你确定要删除，删除后不能恢复！！');return document.del;><font color=blue>删除</font></a></td></tr><tr><td class='hr' colspan='2'></td></tr>"
if not rs1.bof and not rs1.eof then
do while not rs1.eof
response.Write "<tr class=bg><td height=25>"
response.Write "&nbsp;<b>√</b>&nbsp;"
response.Write rs1("classname")
response.Write "</td><td height=24 align=center><a href=?action=edittype&id="&rs1("id")&">修改</a>&nbsp;&nbsp;<a href='?action=deltype&id="&rs1("id")&"'>删除<a></td></tr>"
rs1.movenext
loop
end if
rs1.close
set rs1=nothing
rs.movenext
loop
else
response.Write "<tr class=bg><td height=24 colspan=2 align=center>没有任何分类！</td></tr>"
end if
response.Write "</table>"
rs.close
set rs=nothing
end sub
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台删除分类调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub deltype(lmname,lmid)
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname&" where id="&lmid
rs.open sql,conn,1,3
rs.delete
rs.close
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname&" where class="&lmid
rs.open sql,conn,1,3
do while not rs.eof
rs.delete
rs.movenext
loop
rs.close
set rs=nothing
response.Write "<script>alert('分类删除成功！');this.location.href='?action=type';</script>"
end sub 
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台修改分类调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub edittype(lmname,typeid)
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname&" where id="&typeid
rs.open sql,conn,1,3%>
<table width="270" align=center border="0" cellpadding="0" cellspacing="0" rules=none class=3d>
<tr>
<td height=22 class=title><b>&nbsp;<img src=img/ie.gif border=0 width=15 height=15 align=absMiddle>&nbsp;修改分类名称</b></td>
</tr><tr></tr><form method=get name=formtype id=formtype>
<tr><td class=bg align=center><br>分类名称：<input name=classname type=text id=classname value='<%=rs("classname")%>' size=30 class=yecao>&nbsp;<input type=hidden name=id value="<%=typeid%>"><input type=hidden name=action value=edittypename>
<br><br><input name=Submittype type=submit id=Submittype value="修 改" class="adminbutton">
<input  type=reset value="清 空" class="adminbutton"><br><br></td><br></tr></table></form>
<%rs.close
set rs=nothing
end sub
sub submittype(lmname,typeid,lmnamevalue)
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname&" where id="&typeid
rs.open sql,conn,1,3
rs("classname")=lmnamevalue
rs.update
rs.close
set rs=nothing
response.Write "<script>alert('分类名称修改成功！');this.location.href='?action=type';</script>"
end sub
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台添加分类调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub addtype()%><form method=get name=formtype id=formtype>
<table width="270" align=center border="0" cellpadding="0" cellspacing="0" rules=none class=3d>
<tr><td height=22 class=title><b>&nbsp;<img src=img/ie.gif border=0 width=15 height=15 align=absMiddle>&nbsp;添加分类</b></td></tr>
<tr height=30 class=bg><td align=center>
<br>&nbsp;分类名称：<input name=classname type=text id=classname size=20 class=yecao>
<br><br>
<input type=hidden name=action value=addtypeok>
<input name=Submitaddtype type=submit value="添 加" class=adminbutton>
<input  type=reset value="清 空" class="adminbutton"><br><br></td></tr></table></form><%end sub

'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台添加子分类调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub addtype2(typeid)%>
<form method=get name=formtype id=formtype>
<table width="300" align=center border="0" cellpadding="0" cellspacing="0" rules=none class=3d><tr>
<td height=22 class=title><b>&nbsp;<img src=img/ie.gif border=0 width=15 height=15 align=absMiddle>&nbsp;添加子分类</b></td></tr>
<tr class=bg align=center>
<td height=25><br>&nbsp;子分类名称：<input name=classname type=text id=classname class=yecao size=30>
<input type=hidden name=id value='<%=typeid%>'><input type=hidden name=action value=addtype2ok> 
<br><br>
<input name=Submitaddtype type=submit value="添 加" class="adminbutton">
<input  type=reset value="清 空" class="adminbutton"><br><br>
</td></tr>
</table>
</form>
<%end sub
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台添加分类处理调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub addtypeok(lmname,lmnamevalue)
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname
rs.open sql,conn,1,3
rs.addnew
rs("classname")=lmnamevalue
rs.update
rs.close
set rs=nothing
response.Write "<script>alert('分类添加成功！');this.location.href='?action=type';</script>"
end sub
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台添加子分类处理调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub addtype2ok(lmname,lmnamevalue,typeid)
set rs=server.CreateObject("adodb.recordset")
sql="select * from "&lmname
rs.open sql,conn,1,3
rs.addnew
rs("class")=typeid
rs("classname")=lmnamevalue
rs.update
rs.close
set rs=nothing
response.Write "<script>alert('子分类添加成功！');this.location.href='?action=type';</script>"
end sub%>
<%'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台添加时显示分类调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub newclass(lmname)
response.Write "<select name='class' id='class'>"
Set rslm = Server.CreateObject("ADODB.Recordset")
sqllm = "SELECT * FROM "&lmname&" where class=0"
rslm.open sqllm,conn,1,3
if not rslm.bof and not rslm.eof then
do while not rslm.eof
set rslm2=server.CreateObject("adodb.recordset")
sqllm2 = "SELECT * FROM "&lmname&" where class="&rslm("id")
rslm2.open sqllm2,conn,1,3
if not rslm2.bof and not rslm2.eof then
do while not rslm2.eof
response.Write "<option value='"&rslm2("id")&"'>【"&rslm("classname")&"】→〖"&rslm2("classname")&"〗</option>"
rslm2.movenext
loop
end if
rslm2.close
set rslm2=nothing
rslm.movenext
loop
else
response.Write"<option>请先添加分类</option>"
end if
rslm.close
set rslm=nothing
response.Write "</select>"
end sub
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
'后台修改时显示分类调用过程
'☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★☆★
sub editclass(lmname,lmid)
response.Write "<select name='class' id='class'>"
Set rslm = Server.CreateObject("ADODB.Recordset")
sqllm = "SELECT * FROM "&lmname&" where class=0"
rslm.open sqllm,conn,1,3
if not rslm.bof and not rslm.eof then
do while not rslm.eof
set rslm2=server.CreateObject("adodb.recordset")
sqllm2 = "SELECT * FROM "&lmname&" where class="&rslm("id")
rslm2.open sqllm2,conn,1,3
if not rslm2.bof and not rslm2.eof then
do while not rslm2.eof
response.Write "<option value='"&rslm2("id")&"'"
if rslm2("id")=lmid then response.Write "selected" end if
response.Write ">【"&rslm("classname")&"】→〖"&rslm2("classname")&"〗</option>"
rslm2.movenext
loop
end if
rslm2.close
set rslm2=nothing
rslm.movenext
loop
end if