newsdel2.asp

zheng fu wang zhan gong neng qi quan

<%@ Language=VBScript %>
<!--#include file="conn.asp"-->
<!--#include file="ConnUser.asp"-->
<!--#include file="config.asp"-->
<!--#include file="function.asp"-->
<!--#include file="char.inc"-->
<!--#include file="chkuser.asp" -->
<!--#include file="ChkManage.asp" -->
<!--#include file="ChkURL.asp"-->
<%
if not(request.cookies(eChuang)("ManageKEY")="super" or request.cookies(eChuang)("ManageKEY")="typemaster" or request.cookies(eChuang)("ManageKEY")="bigmaster") then
	Show_Err("对不起，您的后台管理权限不够操作！")
	response.end
else
	dim jingyong,delnews
	delnews=request.form("delnews")
	if delnews="1" then
		set rs=server.createobject("adodb.recordset")
		sql="select * from "& db_User_Table &" where  "& db_User_Name &"='"&request.cookies(eChuang)("username")&"'"
		rs.open sql,ConnUser,1,3
		jingyong=rs("jingyong")
		rs.close
		set rs=nothing

		if request.cookies(eChuang)("key")="super" or request.cookies(eChuang)("key")="check" or request.cookies(eChuang)("key")="bigmaster" or request.cookies(eChuang)("key")="smallmaster" or (request.cookies(eChuang)("key")="selfreg" and jingyong=0) or request.cookies(eChuang)("key")="typemaster" then%>
			<%dim username,typeid,typename,bigclassid,E_BigClassName,smallclassid,E_smallclassname
			NewsID=ChkRequest(Request.Form("NewsID"),1)	'防注入
			set rs=server.CreateObject("ADODB.RecordSet")
			rs.Source="select * from "& db_News_Table &" where NewsID=" & NewsID
			rs.Open rs.source,conn,1,1
			image=rs("image")
			username=rs("editor")

			dim title
			title=rs("title")
			newsrelated=rs("newsrelated")
			typeid=rs("typeid")
			bigclassid=rs("bigclassid")
			smallclassid=rs("smallclassid")
			rs.close
			set rs=nothing
			set rs=server.CreateObject("ADODB.RecordSet")
			rs.Source="select * from "& db_Type_Table &" where typeID=" & typeID
			rs.Open rs.source,conn,1,1
			typename=rs("typename")
			rs.close
			set rs=Nothing
			if smallclassid<>"" then
			set rs=server.CreateObject("ADODB.RecordSet")
			rs.Source="select * from "& db_BigClass_Table &" where bigclassID=" & bigclassID
			rs.Open rs.source,conn,1,1
			E_BigClassName=rs("E_BigClassName")
			rs.close
			set rs=Nothing
			end if
			if smallclassid<>"" then
				set rs=server.CreateObject("ADODB.RecordSet")
				rs.Source="select * from "& db_SmallClass_Table &" where smallclassID=" & smallclassID
				rs.Open rs.source,conn,1,1
				E_smallclassname=rs("E_smallclassname")
				rs.close
				set rs=nothing
			end if
			button_value=trim(Request.Form("alert_button"))
			dim dep1,dep2
			if button_value="是" then
				if request.Form("del")<>"1" then
					set rs2=server.createobject("adodb.recordset")
					sql2="select * from "& db_User_Table &" where  "& db_User_Name &"='"&username&"'"
					rs2.open sql2,ConnUser,1,3
					dep1=rs2("depname")
		            dep2=rs2("deptype")
					rs2("number")=rs2("number")-1
					rs2.update
					rs2.close
					set rs2=nothing

					set rs5=server.createobject("adodb.recordset")
					sql5="select * from "& db_dep_Table &" where  ( depname='"&dep1&"'  and deptype='"&dep2&"' ) "
					rs5.open sql5,Conn,1,3
					If(not rs5.eof) or (not rs5.bof) Then
						rs5("depnumber")=rs5("depnumber")-1
						rs5.update
					End if
					rs5.close
					set rs5=nothing
				end if
				conn.execute("delete from "& db_News_Table &" where NewsID=" & NewsID)
				conn.execute("delete from "& db_Review_Table &" where NewsID=" & NewsID)
				set rs2=server.createobject("adodb.recordset")
				sql2="select * from "& db_Attach_Table &" where NewsID=" & NewsID
				rs2.open sql2,conn,1,3
				do while not rs2.EOF
					Set fso=Server.CreateObject("Scripting.FileSystemObject")
					If fso.FileExists(Server.Mappath(FileUploadPath & rs2("filename")))=true Then
						fso.DeleteFile Server.MapPath(FileUploadPath & rs2("filename") )
					End If
					Set fso=Nothing
					rs2.movenext
				loop
				rs2.close
				set rs2=nothing
				conn.execute("delete from "& db_Attach_Table &" where NewsID=" & NewsID)
				if smallclassid<>"" then
					response.write "<meta http-equiv=""refresh"" content="""&freetime&";url=listnews.asp?smallclassid="&smallclassid&""">"
					Show_Message("<p align=center><font color='000000'>总栏“"&typename&"”下大类“"&E_BigClassName&"”下的小类“"&E_smallclassname&"”的文章“"&title&"”已经被删除！<br><br>"&freetime&"秒钟后返回上页！</font>")
					response.end
				else if bigclassid<>"" then
					response.write "<meta http-equiv=""refresh"" content="""&freetime&";url=E_SmallNO.asp?bigclassid="&bigclassid&""">"
					Show_Message("<p align=center><font color='000000'>总栏“"&typename&"”下大类“"&E_BigClassName&"”的文章“"&title&"”已经被删除！<br><br>"&freetime&"秒钟后返回上页！</font>")
					response.end
					else
						response.write "<meta http-equiv=""refresh"" content="""&freetime&";url=E_bigclassNO.asp?typeid="&typeid&""">"
						Show_Message("<p align=center><font color='000000'>总栏“"&typename&"”下的文章“"&title&"”已经被删除！<br><br>"&freetime&"秒钟后返回上页！</font>")
						response.end
					end if			
				end if
			else
				if smallclassid<>"" then
					response.write "<meta http-equiv=""refresh"" content="""&freetime&";url=listnews.asp?smallclassid="&smallclassid&""">"
				else 
					if bigclassid<>"" then
					response.write "<meta http-equiv=""refresh"" content="""&freetime&";url=E_SmallNO.asp?bigclassid="&bigclassid&""">"
					else 
						response.write "<meta http-equiv=""refresh"" content="""&freetime&";url=E_bigclassNO.asp?typeid="&typeid&""">"
					end if
				end if
				Show_Err("您没有执行删除操作！<br><br>"&freetime&"秒钟后返回上页！</a>")
				response.end
			end if
		end if
	else
		Show_Err("您无权删除此项目！<br><br><a href='javascript:history.back()'>返回</a>")
		response.end
	end if
end if%>