awardaction.asp

后台目录:qwbAdmin/Login.asp 登陆用户名:admin 登陆密码:admin

<% Option Explicit %>
<!--#include file="../../FS_Inc/Const.asp" -->
<!--#include file="../../FS_InterFace/MF_Function.asp" -->
<!--#include file="../../FS_Inc/Function.asp" -->
<%'Copyright (c) 2006 Foosun Inc. Code by Einstein.Liu
Dim Conn,User_Conn,awardRs,prizeRs,AwardName,AwardPic,StartDate,EndDate,PrizeGradeNum,PrizeIDS,PrizeNames,ForIndex,PrizeName,PrizeGrade,PrizePic,PrizeNum,CurrentPrizeIDS,answerNum,AnswerDesc,RightAnswer,CurrentAnswerID,CurrentAnswerIDS,prizeNeedPoint,usernumber
Dim prizeID
MF_Default_Conn
MF_User_Conn
MF_Session_TF
if not MF_Check_Pop_TF("ME_award") then Err_Show 
if request.QueryString("act")="addaction" then
	Set awardRs=Server.CreateObject(G_FS_RS)
	Set prizeRs=Server.CreateObject(G_FS_RS)
	AwardName=Request.Form("AwardName")
	AwardPic=Request.Form("AwardPic")
	StartDate=Request.Form("StartDate")
	EndDate=Request.Form("EndDate")
	PrizeGradeNum=Request.Form("PrizeGradeNum")
	'添加奖品
	for ForIndex=0 to PrizeGradeNum-1
		PrizeName=Request.Form("Prize_"&(ForIndex+1)&"_name")
		PrizeGrade=ForIndex+1
		prizeNeedPoint=Request.Form("NeedPoint_"&(ForIndex+1))
		PrizePic=Request.Form("prize_"&(ForIndex+1)&"_pic")
		PrizeNum=Request.Form("prize_"&(ForIndex+1)&"_number")
		if PrizeName="" or PrizeNum="" or not isnumeric(PrizeNum) then
			Response.Redirect("../error.asp?ErrCodes=<li>奖品名称可能为空</li><li>奖品数量可能为空</li><li>奖品数量中可能包含有字符</li>")
			Response.End()
		end if
		Set prizeRs=User_Conn.Execute("insert into FS_ME_Prize (PrizeName,NeedPoint,PrizeGrade,PrizePic,PrizeNum) values('"&PrizeName&"','"&prizeNeedPoint&"','"&PrizeGrade&"','"&PrizePic&"','"&PrizeNum&"')")
		CurrentPrizeIDS=CurrentPrizeIDS&","&User_Conn.Execute("Select Max(PrizeID) from FS_ME_Prize")(0)
	next
	CurrentPrizeIDS=DelHeadAndEndDot(CurrentPrizeIDS)
	awardRs.open "select AwardName,AwardPic,StartDate,EndDate,PrizeIDS,opened from FS_ME_award",User_Conn,1,3
	awardRs.addNew
	awardRs("AwardName")=AwardName
	awardRs("AwardPic")=AwardPic
	awardRs("StartDate")=StartDate
	awardRs("EndDate")=EndDate
	awardRs("PrizeIDS")=CurrentPrizeIDS
	awardRs("opened")=0
	awardRs.update
	awardRs.close
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/award.asp")
		Response.End()
	end if
elseif request.QueryString("act")="delete" then
	if not MF_Check_Pop_TF("ME029") then Err_Show 
	User_Conn.Execute("Delete From FS_ME_Award where awardid in ("&request.Form("DeleteAwards")&")")
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/award.asp")
		Response.End()
	end if
elseif Request.QueryString("act")="editaction" then
	Set awardRs=Server.CreateObject(G_FS_RS)
	Set prizeRs=Server.CreateObject(G_FS_RS)
	AwardName=Request.Form("AwardName")
	AwardPic=Request.Form("AwardPic")
	StartDate=Request.Form("StartDate")
	EndDate=Request.Form("EndDate")
	PrizeGradeNum=Request.Form("PrizeGradeNum")
	'添加奖品
	for ForIndex=0 to PrizeGradeNum-1
		PrizeName=Request.Form("Prize_"&(ForIndex+1)&"_name")
		PrizeGrade=ForIndex+1
		prizeNeedPoint=Request.Form("NeedPoint_"&(ForIndex+1))
		PrizePic=Request.Form("prize_"&(ForIndex+1)&"_pic")
		PrizeNum=Request.Form("prize_"&(ForIndex+1)&"_number")
		if PrizeName="" or PrizeNum="" or not isnumeric(PrizeNum) then
			Response.Redirect("../error.asp?ErrCodes=<li>奖品名称可能为空</li><li>奖品数量可能为空</li><li>奖品数量中可能包含有字符</li>")
			Response.End()
		end if
		Set prizeRs=User_Conn.Execute("insert into FS_ME_Prize (PrizeName,NeedPoint,PrizeGrade,PrizePic,PrizeNum) values('"&PrizeName&"',"&prizeNeedPoint&","&PrizeGrade&",'"&PrizePic&"',"&PrizeNum&")")
		CurrentPrizeIDS=CurrentPrizeIDS&","&User_Conn.Execute("Select Max(PrizeID) from FS_ME_Prize")(0)
	next
	CurrentPrizeIDS=DelHeadAndEndDot(CurrentPrizeIDS)
	Response.Write("select AwardName,AwardPic,StartDate,EndDate,PrizeIDS,opened from FS_ME_award where awardid="&NoSqlHack(Request.QueryString("awardid")))
	awardRs.open "select AwardName,AwardPic,StartDate,EndDate,PrizeIDS,opened from FS_ME_award where awardid="&NoSqlHack(Request.QueryString("awardid")),User_Conn,1,3
	awardRs("AwardName")=AwardName
	awardRs("AwardPic")=AwardPic
	awardRs("StartDate")=StartDate
	awardRs("EndDate")=EndDate
	Response.Write("Delete From FS_ME_Prize where prizeid in("&awardRs("PrizeIDS")&")")
	User_Conn.execute("Delete From FS_ME_Prize where prizeid in("&awardRs("PrizeIDS")&")")
	awardRs("PrizeIDS")=CurrentPrizeIDS
	awardRs("opened")=0
	awardRs.update
	awardRs.close
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/award.asp")
		Response.End()
	end if
elseif Request.QueryString("Act")="editPrizeaction" then
	Set prizeRs=Server.CreateObject(G_FS_RS)
	prizeRS.open  "select prizeID,PrizeName,prizeDesc,PrizePic,NeedPoint,storage,StartDate,EndDate,provider,perUserNum from FS_ME_Prize where prizeID="&NoSqlHack(request.QueryString("prizeid")),User_Conn,1,3
	prizeRS("PrizeName")=Request.Form("PrizeName")
	prizeRS("prizeDesc")=Request.Form("prizeDesc")
	prizeRS("NeedPoint")=Request.Form("NeedPoint")
	prizeRS("storage")=Request.Form("storage")
	prizeRS("StartDate")=Request.Form("StartDate")
	prizeRS("EndDate")=Request.Form("EndDate")	
	prizeRS("provider")=Request.Form("provider")	
	prizeRS("perUserNum")=Request.Form("perUserNum")
	prizeRs("PrizePic")=request.Form("PrizePic")
	prizeRs.update
	prizeRs.close
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/ChangePrize.asp")
		Response.End()
	end if
elseif Request.QueryString("Act")="addPrizeaction" then
	Set prizeRs=Server.CreateObject(G_FS_RS)
	prizeRS.open  "select prizeID,PrizeName,prizeDesc,PrizePic,NeedPoint,storage,StartDate,EndDate,provider,perUserNum,isChange from FS_ME_Prize ",User_Conn,1,3
	prizeRs.addnew
	prizeRS("PrizeName")=Request.Form("PrizeName")
	prizeRS("prizeDesc")=Request.Form("prizeDesc")
	prizeRS("NeedPoint")=Request.Form("NeedPoint")
	prizeRS("storage")=Request.Form("storage")
	prizeRS("StartDate")=Request.Form("StartDate")
	prizeRS("EndDate")=Request.Form("EndDate")	
	prizeRS("provider")=Request.Form("provider")	
	prizeRS("perUserNum")=Request.Form("perUserNum")	
	prizeRS("isChange")=1
	prizeRs("PrizePic")=request.Form("PrizePic")	
	prizeRs.update
	prizeRs.close
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/ChangePrize.asp")
		Response.End()
	end if
elseif Request.QueryString("Act")="deletePrizeaction" then
	User_Conn.Execute("Update FS_ME_Prize set isChange=0 where PrizeID in ("&Request.Form("DeleteChangePrize")&")")
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/ChangePrize.asp")
		Response.End()
	end if
elseif Request("Act")="editAFPointaction" then
	Set awardRs=Server.CreateObject(G_FS_RS)
	awardRs.open "Select ATopic,needPoint,PrizePoint,APic,ADesc,AStartDate,AEndDate,AnswerIDS,RightAnswerID from FS_ME_AnswerForPoint where Aid="&NoSqlHack(Request.QueryString("AID")),User_Conn,1,3
	awardRs("ATopic")=Request.Form("ATopic")
	awardRs("needPoint")=Request.Form("needPoint")
	awardRs("PrizePoint")=Request.Form("PrizePoint")
	awardRs("APic")=Request.Form("APic")
	awardRs("ADesc")=Request.Form("ADesc")
	awardRs("AStartDate")=Request.Form("StartDate")
	awardRs("AEndDate")=Request.Form("EndDate")
	answerNum=Request.Form("AnswerNum")
	RightAnswer=Request.Form("rightAnswer")
	for ForIndex=0 to answerNum-1
		AnswerDesc=Request.Form("Answer_"&(ForIndex+1))
		if AnswerDesc="" then
			Response.Redirect("../error.asp?ErrCodes=<li>答案内容为空</li>")
			Response.End()
		end if
		User_Conn.Execute("Insert into FS_ME_Answer (AnswerDesc) values('"&AnswerDesc&"')")
		CurrentAnswerID=User_Conn.execute("select Max(answerid) from FS_ME_Answer")(0)
		if (ForIndex+1)=Cint(RightAnswer) then
			awardRs("RightAnswerID")=CurrentAnswerID
		end if
		CurrentAnswerIDS=CurrentAnswerIDS&","&CurrentAnswerID
	next
	User_Conn.execute("Delete From FS_ME_Answer where AnswerID in ("&awardRs("AnswerIDS")&")")
	awardRs("AnswerIDS")=DelHeadAndEndDot(CurrentAnswerIDS)
	awardRs.update
	awardRs.close
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功!</li>&ErrorURL=user/AnswerForPoint.asp")
		Response.End()
	end if
elseif Request.QueryString("Act")="addAFPointaction" then
	Set awardRs=Server.CreateObject(G_FS_RS)
	awardRs.open "Select ATopic,needPoint,PrizePoint,APic,ADesc,AStartDate,AEndDate,AnswerIDS,RightAnswerID from FS_ME_AnswerForPoint",User_Conn,1,3
	awardRs.addNew
	awardRs("ATopic")=Request.Form("ATopic")
	awardRs("needPoint")=Request.Form("needPoint")
	awardRs("PrizePoint")=Request.Form("PrizePoint")
	awardRs("APic")=Request.Form("APic")
	awardRs("ADesc")=Request.Form("ADesc")
	awardRs("AStartDate")=Request.Form("StartDate")
	awardRs("AEndDate")=Request.Form("EndDate")
	answerNum=Request.Form("AnswerNum")
	RightAnswer=Request.Form("rightAnswer")
	for ForIndex=0 to answerNum-1
		AnswerDesc=Request.Form("Answer_"&(ForIndex+1))
		if AnswerDesc="" then
			Response.Redirect("../error.asp?ErrCodes=<li>答案内容为空</li>")
			Response.End()
		end if
		User_Conn.Execute("Insert into FS_ME_Answer (AnswerDesc) values('"&AnswerDesc&"')")
		CurrentAnswerID=User_Conn.execute("select Max(answerid) from FS_ME_Answer")(0)
		if (ForIndex+1)=Cint(RightAnswer) then
			awardRs("RightAnswerID")=CurrentAnswerID
		end if
		CurrentAnswerIDS=CurrentAnswerIDS&","&CurrentAnswerID
	next
	awardRs("AnswerIDS")=DelHeadAndEndDot(CurrentAnswerIDS)
	Response.Write(DelHeadAndEndDot(CurrentAnswerIDS))
	awardRs.update
	awardRs.close
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/AnswerForPoint.asp")
		Response.End()
	end if
elseif Request.QueryString("Act")="deleteAFPointaction" then
	CurrentAnswerIDS=User_Conn.execute("Select AnswerIDS From FS_ME_AnswerForPoint where AID in ("&Request("DeleteAFPoint")&")")(0)
	User_Conn.execute("Delete From FS_ME_Answer where answerid in ("&CurrentAnswerIDS&")")
	User_Conn.execute("Delete From FS_ME_AnswerForPoint where AID in ("&Request("DeleteAFPoint")&")")
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/AnswerForPoint.asp")
		Response.End()
	end if
elseif request.QueryString("Act")="open" then
	if not MF_Check_Pop_TF("ME030") then Err_Show 
	Dim awardID,resultRs,prizeNumber
	awardID=NoSqlHack(request.QueryString("awardiD"))
	Set awardRs=User_Conn.execute("Select prizeID from FS_ME_User_Prize where awardID="&awardID)
	while not awardRs.eof
		Set prizeRs=User_Conn.execute("Select PrizeNum from FS_ME_Prize where prizeID="&awardRs("prizeID"))
		if not PrizeRs.eof then
			prizeNumber=prizeRs("PrizeNum")
			if G_IS_SQL_DB=0 then
				Randomize
				Response.Write(awardRs("prizeID"))
				Set resultRs=User_Conn.execute("Select top "&prizeNumber&" id from FS_ME_User_Prize order by Rnd(-(ID+"&Rnd()&"))")
			Else
				Set resultRs=User_Conn.execute("Select top "&prizeNumber&" id from FS_ME_User_Prize order BY NEWID()")
			End if
			while not resultRs.eof
				User_Conn.execute("Update FS_ME_User_Prize set winner=1 where id="&resultRs("id"))
				resultRs.movenext
			wend
		ENd if
		awardRs.movenext
	wend
	awardRs.close
	User_Conn.execute("Update FS_ME_Award set opened=1 where awardid="&awardid)
	Set awardRs=nothing
	Set resultRs=nothing
	if err.number=0 then
		Response.Redirect("../success.asp?ErrCodes=<li>操作成功</li>&ErrorURL=user/award.asp")
		Response.End()
	end if
elseif request.QueryString("Act")="deleteresult" then
	prizeID=NoSqlHack(request("prizeid"))
	usernumber=NoSqlHack(request("usernumber"))
	if trim(prizeID)<>"" And  trim(usernumber)<>"" then
		User_Conn.execute("Delete from FS_ME_User_Prize where prizeid="&prizeid&" and usernumber='"&usernumber&"'")
	End if
	response.Write("ok")
	Response.End()
end if
if err.number>0 then
	Response.Redirect("../error.asp?ErrCodes=<li>"&err.description&"</li>")
	Response.End()
end if
Set awardRs=nothing
Set prizeRs=nothing
Conn.close
User_Conn.close
Set Conn=nothing
Set User_Conn=nothing
%>