admin_works.asp

小说站源代码文件

sub bclass()
oldclass=request("oldclass")
CheckSqlnum(oldclass)
oldclass=int(oldclass)
newclass=request("newclass")
CheckSqlnum(newclass)
newclass=int(newclass)
if oldclass="" or newclass="" or oldclass=0 or newclass=0 then
	ErrCodes = ErrCodes & "<li>您需要选择原分类和目标分类，不能选择大类！</li><br>"
	FoundErr=True
end if
if newclass=oldclass then
	ErrCodes = ErrCodes & "<li>原分类和目标分类不能相同！</li><br>"
	FoundErr=True
end if
if FoundErr=True then
	Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
	set rs2=server.createobject("adodb.recordset")
	if IsSqlDataBase = 2 then
		sql2="select list_typeID from list_Class where list_classid="&newclass&" limit 1"
	else
		sql2="select top 1 list_typeID from list_Class where list_classid="&newclass&""
	end if
	rs2.open sql2,conn,1,1
	if rs2.eof then
		typeid=0
	else
		typeid=rs2("list_typeID")
	end if
	rs2.close
	set rs2=nothing
	conn.execute ("update list_book set list_lei="&newclass&",list_class="&typeid&" where list_lei="&oldclass)
	conn.execute ("update list_cook set classid="&newclass&" where classid="&oldclass)
call connclose() 
Call ShowAdminSuccessMsg("<li> 合并长篇作品分类　操作完成！</li><br>","admin_bookclass.asp?info=bclass")
end if

end sub
'——————————
sub ar_class()
classname=GetTextFromHtml(trim(request.form("classname")))
classinfo=GetTextFrHtml(htmlencode(request.form("classinfo")))
if classname="" then
	ErrCodes = ErrCodes & "<li>请添写短篇作品分类名称！</li><br>"
	FoundErr=True
	end if
if FoundErr=True then
	Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
	if IsSqlDataBase = 1 then
		Conn.Execute("InSert Into Ar_class (classname,classinfo,classtime) Values ('"&classname&"','"&classinfo&"',getdate())")
	else
		Conn.Execute("InSert Into Ar_class (classname,classinfo,classtime) Values ('"&classname&"','"&classinfo&"',Now())")
	end if
	if makeJS=1 then
		temArticleclass()
		temArticleclass1()
	end if
call connclose() 
Call ShowAdminSuccessMsg("<li>成功添加短篇作品分类“"&classname&"”！</li><br>","admin_Article.asp?info=classlist")
end if
end sub
'——————————
sub ar_class_edit()
classid=CheckSql(request.querystring("classid"))
CheckSqlnum(classid)
classid=int(classid)
classname=GetTextFromHtml(trim(request.form("classname")))
classinfo=GetTextFrHtml(htmlencode(request.form("classinfo")))
if classname="" then
	ErrCodes = ErrCodes & "<li>短篇作品分类名称不能为空！</li><br>"
	FoundErr=True
end if
if FoundErr=True then
	Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
	conn.execute ("update Ar_class set classname='"&classname&"',classinfo='"&classinfo&"' where id="&classid)
	if makeJS=1 then
		temArticleclass()
		temArticleclass1()
	end if
	call connclose() 
	Call ShowAdminSuccessMsg("<li>短篇作品分类修改成功！</li><br>","admin_Article.asp?info=classlist")
end if
end sub
'——————————
sub ar_class_del()
id=CheckSql(request.querystring("id"))
CheckSqlnum(id)
id=int(id)
set rs=server.CreateObject("ADODB.recordset")
sql="select Ar_userid from Article where Ar_class="&id&""
rs.open sql,conn,1,1
if not(rs.eof and rs.bof) then
do while not rs.eof
	userid=rs("Ar_userid")
	set rsu=server.CreateObject("ADODB.recordset")
	sqlu="select UserGrade from userinfo where ID="&userid&""
	rsu.open sqlu,conn,1,3
	if not(rsu.eof and rsu.bof) then
		rsu("UserGrade")=rsu("UserGrade")-1
		rsu.update
		rsu.close
	set rsu=nothing
	end if
	set rsfile=server.createobject("adodb.recordset") 
	strSQL ="select fileurl_name,fileurl_path from filetest where fileurl_class=2 and fileurl_fileID ="&id&""
	rsfile.open strSQL,conn,1,1
	if not(rsfile.eof and rsfile.bof) then
	do while not rsfile.eof
		file1=rsfile("fileurl_path")&rsfile("fileurl_name")
		FSOFiledel(file1)
	rsfile.movenext
    loop
	end if
	rsfile.close
	set rsfile=nothing
	conn.execute"delete from filetest where ID ="&id&""
rs.movenext
loop

conn.execute "delete from Article where Ar_class = "&id&""
rs.close
set rs=nothing
end if
conn.execute "delete from Ar_class where id = "&id&""
if makeJS=1 then
temArticleclass()
temArticleclass1()
end if
call connclose() 
Call ShowAdminSuccessMsg(Success & "<li>短篇作品分类删除成功！</li><br>","admin_Article.asp?info=classlist")
end sub
'——————————
sub aclass()
oldclass=CheckSql(request("oldclass"))
CheckSqlnum(oldclass)
oldclass=int(oldclass)
newclass=CheckSql(request("newclass"))
CheckSqlnum(newclass)
newclass=int(newclass)
if oldclass="" or newclass="" then
	ErrCodes = ErrCodes & "<li>您需要选择原分类和目标分类！</li><br>"
	FoundErr=True
end if
if newclass=oldclass then
	ErrCodes = ErrCodes & "<li>原分类和目标分类不能相同！</li><br>"
	FoundErr=True
end if
if FoundErr=True then
	Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
	conn.execute ("update Article set Ar_class="&newclass&" where Ar_class="&oldclass)
call connclose() 
Call ShowAdminSuccessMsg("<li> 合并短篇作品分类　操作完成！</li><br>","admin_Article.asp?info=classaclass")
end if

end sub

sub article_add()
Ar_clas=request.form("Ar_class")
Ar_key=GetTextFromHtml(trim(request.form("Ar_key")))
subject=GetTextFromHtml(trim(request.form("subject")))
message=htmlencode(request.form("message"))
Ar_username=GetTextFromHtml(trim(request.form("Ar_username")))
Ar_size=Len(request.form("message"))
Ar_lock=request.form("Ar_lock")
if Ar_clas="" then
	ErrCodes = ErrCodes & "<li>类型不能为空!</li><br>"
	FoundErr=True
end if
if Ar_key="" then
	ErrCodes = ErrCodes & "<li>关键字不能为空!</li><br>"
	FoundErr=True
end if
if subject="" then
	ErrCodes = ErrCodes & "<li>名称不能为空!</li><br>"
	FoundErr=True
end if
if Ar_username="" then
	ErrCodes = ErrCodes & "<li>作者不能为空！</li><br>"
	FoundErr=True
end if
if message="" then
	ErrCodes = ErrCodes & "<li>内容不能为空!</li><br>"
	FoundErr=True
end if
if Ar_lock="" then
	ErrCodes = ErrCodes & "<li>审核状态不能为空!</li><br>"
	FoundErr=True
end if
if Ar_size>200 then
	ErrCodes = ErrCodes & "<li>您发表的短篇作品标题大于所规定字数（限定200字之内）！</li><br>"
	FoundErr=True
end if
if Ar_size>ArticlesizeNum then
	ErrCodes = ErrCodes & "<li>您发表的短篇作品内容大于所规定字数（限定"&ArticlesizeNum&"字之内）！</li><br>"
	FoundErr=True
end if
	set rs4=server.CreateObject("ADODB.recordset")
	sql4="select Ar_id from Article where Ar_name='"&subject&"' and Ar_username='"&Ar_username&"' and Ar_class="&Ar_clas&" order by Ar_id desc"
	rs4.open sql4,conn,1,1
	if not(rs4.eof and rs4.bof) then
		ErrCodes = ErrCodes & "<li>您发表的短篇作品标题在该分类已被占用，请返回更正！</li><br>"
		FoundErr=True
	End if
	rs4.close
if FoundErr=True then
	Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
	if IsSqlDataBase = 1 then
		Conn.Execute("InSert Into Article (Ar_name,Ar_username,Ar_Content,Ar_key,Ar_class,Ar_size,Ar_lock,Ar_data) Values ('"&subject&"','"&Ar_username&"','"&message&"','"&Ar_key&"','"&Ar_clas&"','"&Ar_size&"','"&Ar_lock&"',getdate())")
	else
		Conn.Execute("InSert Into Article (Ar_name,Ar_username,Ar_Content,Ar_key,Ar_class,Ar_size,Ar_lock,Ar_data) Values ('"&subject&"','"&Ar_username&"','"&message&"','"&Ar_key&"','"&Ar_clas&"','"&Ar_size&"','"&Ar_lock&"',Now())")
	end if
	set rs4=server.CreateObject("ADODB.recordset")
	sql4="select Ar_id from Article where Ar_name='"&subject&"' and Ar_username='"&Ar_username&"' and Ar_class="&Ar_clas&" order by Ar_id desc"
	rs4.open sql4,conn,1,1
	if rs4.eof and rs4.bof then
		ID=0
	else
		ID=rs4("Ar_id")
	End if
	rs4.close
	set rs4=nothing
	if request.form("attach")<>"" then
		attachArray=Split(request.form("attach"),";")
		For i1=0 To Ubound(attachArray)-1
			if Instr(request.form("message"),attachArray(i1))> 0 then
				attachid=CheckSql(Replace(Replace(attachArray(i1),"[attach]",""),"[/attach]",""))
				CheckSqlnum(attachid)
				conn.execute ("update filetest set fileurl_fileID="&ID&" where id="&attachid)
			end if
		Next
	end if
	'处理上传文件结束
	'处理远程获取文件开始
	if request.form("downpic")=1 then
		viewCont=Getimgs(request.form("message"),"管理员："&request.cookies("CnendWeb")("admininfo_loginname"),SiteSystemPath&"articleview/",2,ID)
		conn.execute ("update Article set Ar_Content='"&htmlencode(viewCont)&"' where id="&id)
	end if
	'处理远程获取文件结束
call connclose() 
Call ShowAdminSuccessMsg("<li>短篇作品添加成功！</li><br>","admin_article.asp?info=list&cndb=all")
end if
end sub
'——————————
sub article_edit()
id=CheckSql(request.querystring("id"))
CheckSqlnum(id)
id=int(id)
urltype=request.querystring("urltype")
page=request.querystring("page")

Ar_clas=request.form("Ar_class")
Ar_key=GetTextFromHtml(trim(request.form("Ar_key")))
subject=GetTextFromHtml(trim(request.form("subject")))
message=htmlencode(request.form("message"))
Ar_username=GetTextFromHtml(trim(request.form("Ar_username")))
Ar_size=Len(message)
Ar_lock=request.form("Ar_lock")
if Ar_clas="" then
	ErrCodes = ErrCodes & "<li>类型不能为空!</li><br>"
	FoundErr=True
end if
if Ar_key="" then
	ErrCodes = ErrCodes & "<li>关键字不能为空!</li><br>"
	FoundErr=True
end if
if subject="" then
	ErrCodes = ErrCodes & "<li>名称不能为空!</li><br>"
	FoundErr=True
end if
if Ar_username="" then
	ErrCodes = ErrCodes & "<li>作者不能为空！</li><br>"
	FoundErr=True
end if
if message="" then
	ErrCodes = ErrCodes & "<li>内容不能为空!</li><br>"
	FoundErr=True
end if
if Ar_lock="" then
	ErrCodes = ErrCodes & "<li>审核状态不能为空!</li><br>"
	FoundErr=True
end if
if Ar_size>200 then
	ErrCodes = ErrCodes & "<li>您发表的短篇作品标题大于所规定字数（限定200字之内）！</li><br>"
	FoundErr=True
end if
if Ar_size>ArticlesizeNum then
	ErrCodes = ErrCodes & "<li>您发表的短篇作品内容大于所规定字数（限定"&ArticlesizeNum&"字之内）！</li><br>"
	FoundErr=True
end if

if FoundErr=True then
	Call ShowAdminErrMsg(ErrCodes,"javascript:history.go(-1)")
else
	Ar_name=GetTextFromHtml(trim(request.form("subject")))
	Ar_username=GetTextFromHtml(trim(request.form("Ar_username")))
	Ar_key=GetTextFromHtml(trim(request.form("Ar_key")))
	if IsSqlDataBase = 1 then
		conn.execute ("update Article set Ar_name='"&Ar_name&"',Ar_username='"&Ar_username&"',Ar_key='"&Ar_key&"',Ar_Content='"&message&"',Ar_size="&Ar_size&",Ar_class="&Ar_clas&",Ar_lock="&Ar_lock&",Ar_data=getdate() where Ar_id="&id)
	else
		conn.execute ("update Article set Ar_name='"&Ar_name&"',Ar_username='"&Ar_username&"',Ar_key='"&Ar_key&"',Ar_Content='"&message&"',Ar_size="&Ar_size&",Ar_class="&Ar_clas&",Ar_lock="&Ar_lock&",Ar_data=now() where Ar_id="&id)
	end if
	'处理上传文件开始
	if request.form("attach")<>"" then
		attachArray=Split(request.form("attach"),";")
		For i1=0 To Ubound(attachArray)-1
			if Instr(request.form("message"),attachArray(i1))> 0 then
				attachid=CheckSql(Replace(Replace(attachArray(i1),"[attach]",""),"[/attach]",""))
				CheckSqlnum(attachid)
				conn.execute ("update filetest set fileurl_fileID="&ID&" where id="&attachid)
			end if
		Next
	end if
	'处理上传文件结束
	'处理远程获取文件开始
	if request.form("downpic")=1 then
		viewCont=Getimgs(request.form("message"),"管理员："&request.cookies("CnendWeb")("admininfo_loginname"),SiteSystemPath&"articleview/",2,ID)
		conn.execute ("update Article set Ar_Content='"&htmlencode(viewCont)&"' where id="&id)
	end if
	'处理远程获取文件结束
	'处理文章中包含的上传附件开始
	nolinkfile=""
	set rs=server.createobject("adodb.recordset")
	sql="select id from filetest where fileurl_class=2 and fileurl_fileID="&ID&" order by id desc"
	rs.open sql,conn,1,3
	if rs.eof and rs.bof then
	else
		do while not rs.eof
			attachs="[attachimg]attachment.asp?id="&rs("id")&"[/attachimg]"
			attachs1="[attach]"&rs("id")&"[/attach]"
			if Instr(viewCont,attachs)< 1 then
				nolinkfile=nolinkfile&"||"&rs("id")
			end if
			if Instr(viewCont,attachs1)< 1 then
				nolinkfile=nolinkfile&"||"&rs("id")
			end if
		Rs.MoveNext
		Loop
	end if
	Rs.Close
	Set  Rs=Nothing
	if nolinkfile<>"" then
		arrnolink=split(nolinkfile,"||")
		for i=1 to ubound(arrnolink)
			conn.execute ("update filetest set fileurl_fileID=0 where id="&arrnolink(i))
		next
	end if
	'处理文章中包含的上传附件结束
call connclose() 
if urltype="list" then
	cndb=request.querystring("cndb")
	if cndb="" then
		cndb="all"
	end if
	Call ShowAdminSuccessMsg("<li>短篇作品修改成功！</li><br>","admin_article.asp?info=list&cndb="&cndb&"&page="&page&"")
elseif urltype="search" then
	key_keyword=request.querystring("key_keyword")
	key_type=request.querystring("key_type")
	Call ShowAdminSuccessMsg("<li>短篇作品修改成功！</li><br>","admin_booksearch.asp?key_type="&key_type&"&key_keyword="&key_keyword&"&page="&page&"")
else
	Call ShowAdminSuccessMsg("<li>短篇作品修改成功！</li><br>","admin_article.asp?info=list&cndb=all&page="&page&"")
end if
end if
end sub
'——————————
sub article_del()
id=request.querystring("id")
Ar_id=CheckSql(request.querystring("Ar_id"))
CheckSqlnum(Ar_id)
Ar_id=int(Ar_id)
userid=CheckSql(request.querystring("userid"))
CheckSqlnum(userid)
userid=int(userid)
urltype=request.querystring("urltype")