testmanage.asp

很好的学籍管理系统代码

<%@LANGUAGE="VBSCRIPT"%> 
<!--#include file="Connections/StudentConn.asp" -->
<!--#include file="CheckLogin.asp"-->
<%
' *** Edit Operations: declare variables

MM_editAction = CStr(Request("URL"))

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>

<%
' *** Redirect if userName exists
MM_flag="MM_insert"
If (CStr(Request(MM_flag)) <> "") Then
  strSheetName=Request("SheetName") & ""
  if Instr(strSheetName,"!")>0 or Instr(strSheetName,"@")>0 or Instr(strSheetName,"#")>0 or Instr(strSheetName,"$")>0 or Instr(strSheetName,"%")>0 or Instr(strSheetName,"^")>0 or Instr(strSheetName,"&")>0 or Instr(strSheetName,"*")>0 or Instr(strSheetName,"(")>0 or Instr(strSheetName,")")>0 or Instr(strSheetName,"-")>0 or Instr(strSheetName,"=")>0 or Instr(strSheetName,"\")>0 or Instr(strSheetName,",")>0 or Instr(strSheetName,".")>0 or Instr(strSheetName,"/")>0 or Instr(strSheetName,"?")>0 or Instr(strSheetName,"<")>0 or Instr(strSheetName,">")>0 or Instr(strSheetName,"[")>0 or Instr(strSheetName,"]")>0 or Instr(strSheetName,"{")>0 or Instr(strSheetName,"}")>0 or Instr(strSheetName,"|")>0 or Instr(strSheetName,"+")>0 or Instr(strSheetName,"~")>0 then
	Response.Redirect "TestManage.asp?Err=Char"
  end if

  MM_dupKeyRedirect="TestModify.asp"
  MM_rsKeyConnection=MM_StudentConn_STRING
  MM_dupKeyUserNameValue = CStr(Request.Form("SheetName"))
  MM_dupKeySQL="SELECT SheetName FROM TestName WHERE SheetName='" & MM_dupKeyUserNameValue & "'"
  MM_adodbRecordset="ADODB.Recordset"
  set MM_rsKey=Server.CreateObject(MM_adodbRecordset)
  MM_rsKey.ActiveConnection=MM_rsKeyConnection
  MM_rsKey.Source=MM_dupKeySQL
  MM_rsKey.CursorType=0
  MM_rsKey.CursorLocation=2
  MM_rsKey.LockType=3
  MM_rsKey.Open
  If Not MM_rsKey.EOF Or Not MM_rsKey.BOF Then 
    ' the userName was found - can not add the requested userName
    MM_qsChar = "?"
    If (InStr(1,MM_dupKeyRedirect,"?") >= 1) Then MM_qsChar = "&"
    MM_dupKeyRedirect = MM_dupKeyRedirect & MM_qsChar & "SheetName=" & MM_dupKeyUserNameValue
    Response.Redirect(MM_dupKeyRedirect)
  End If
  MM_rsKey.Close
End If
%>
<%
' *** Insert Record: set variables

If (CStr(Request("MM_insert")) <> "") Then

  MM_editConnection = MM_StudentConn_STRING
  MM_editTable = "TestName"
  MM_editRedirectUrl = "TestManage.asp"
  MM_fieldsStr  = "TestName|value|SheetName|value"
  MM_columnsStr = "TestName|',none,''|SheetName|',none,''"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(i+1) = CStr(Request.Form(MM_fields(i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Insert Record: construct a sql insert statement and execute it

If (CStr(Request("MM_insert")) <> "") Then

  ' create the sql insert statement
  MM_tableValues = ""
  MM_dbValues = ""
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    FormVal = MM_fields(i+1)
    MM_typeArray = Split(MM_columns(i+1),",")
    Delim = MM_typeArray(0)
    If (Delim = "none") Then Delim = ""
    AltVal = MM_typeArray(1)
    If (AltVal = "none") Then AltVal = ""
    EmptyVal = MM_typeArray(2)
    If (EmptyVal = "none") Then EmptyVal = ""
    If (FormVal = "") Then
      FormVal = EmptyVal
    Else
      If (AltVal <> "") Then
        FormVal = AltVal
      ElseIf (Delim = "'") Then  ' escape quotes
        FormVal = "'" & Replace(FormVal,"'","''") & "'"
      Else
        FormVal = Delim + FormVal + Delim
      End If
    End If
    If (i <> LBound(MM_fields)) Then
      MM_tableValues = MM_tableValues & ","
      MM_dbValues = MM_dbValues & ","
    End if
    MM_tableValues = MM_tableValues & MM_columns(i)
    MM_dbValues = MM_dbValues & FormVal
  Next
  MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")"

  If (Not MM_abortEdit) Then
    ' execute the insert
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

' 在DW代码的基础上用SQL语句实现向数据库中添加表

	strSubject="(StudentNum TEXT (8) CONSTRAINT MyFieldConstraint PRIMARY KEY,总分 SINGLE,平均分 SINGLE,全级排名 LONG,班级排名 LONG," 
	strTemp=request("chkbox")
	if instr(strTemp,",")>0 then
		strSubject=strSubject &  replace(strTemp,","," SINGLE,") & " SINGLE)"
	else
		strSubject=strSubject & strTemp & " SINGLE)"
	end if
	strSheetName = MM_dupKeyUserNameValue
	MM_CreateTableConnection = MM_StudentConn_STRING
	MM_CreateTableQuery = "Create Table " & strSheetName & strSubject
	Set MM_CreateTableCmd = Server.CreateObject("ADODB.Command")
	MM_CreateTableCmd.ActiveConnection = MM_CreateTableConnection
    MM_CreateTableCmd.CommandText = MM_CreateTableQuery
	MM_CreateTableCmd.Execute
    MM_CreateTableCmd.ActiveConnection.Close
	
    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
set Recordset1 = Server.CreateObject("ADODB.Recordset")
Recordset1.ActiveConnection = MM_StudentConn_STRING
Recordset1.Source = "SELECT * FROM TestName ORDER BY id DESC"
Recordset1.CursorType = 0
Recordset1.CursorLocation = 2
Recordset1.LockType = 3
Recordset1.Open()
Recordset1_numRows = 0
%>
<%
Dim Recordset2
Dim Recordset2_numRows

Set Recordset2 = Server.CreateObject("ADODB.Recordset")
Recordset2.ActiveConnection = MM_StudentConn_STRING
Recordset2.Source = "SELECT * FROM Subject ORDER BY ID ASC"
Recordset2.CursorType = 0
Recordset2.CursorLocation = 2
Recordset2.LockType = 1
Recordset2.Open()

Recordset2_numRows = 0
%>
<%
Dim Repeat1__numRows
Repeat1__numRows = -1
Dim Repeat1__index
Repeat1__index = 0
Recordset1_numRows = Recordset1_numRows + Repeat1__numRows
%>
<%
Dim Repeat2__numRows
Dim Repeat2__index

Repeat2__numRows = -1
Repeat2__index = 0
Recordset2_numRows = Recordset2_numRows + Repeat2__numRows
%>
<%
' *** Go To Record and Move To Record: create strings for maintaining URL and Form parameters

' create the list of parameters which should not be maintained
MM_removeList = "&index="
If (MM_paramName <> "") Then MM_removeList = MM_removeList & "&" & MM_paramName & "="
MM_keepURL="":MM_keepForm="":MM_keepBoth="":MM_keepNone=""

' add the URL parameters to the MM_keepURL string
For Each Item In Request.QueryString
  NextItem = "&" & Item & "="
  If (InStr(1,MM_removeList,NextItem,1) = 0) Then
    MM_keepURL = MM_keepURL & NextItem & Server.URLencode(Request.QueryString(Item))
  End If
Next

' add the Form variables to the MM_keepForm string
For Each Item In Request.Form
  NextItem = "&" & Item & "="
  If (InStr(1,MM_removeList,NextItem,1) = 0) Then
    MM_keepForm = MM_keepForm & NextItem & Server.URLencode(Request.Form(Item))
  End If
Next

' create the Form + URL string and remove the intial '&' from each of the strings
MM_keepBoth = MM_keepURL & MM_keepForm
if (MM_keepBoth <> "") Then MM_keepBoth = Right(MM_keepBoth, Len(MM_keepBoth) - 1)
if (MM_keepURL <> "")  Then MM_keepURL  = Right(MM_keepURL, Len(MM_keepURL) - 1)
if (MM_keepForm <> "") Then MM_keepForm = Right(MM_keepForm, Len(MM_keepForm) - 1)

' a utility function used for adding additional parameters to these strings
Function MM_joinChar(firstItem)
  If (firstItem <> "") Then
    MM_joinChar = "&"
  Else
    MM_joinChar = ""
  End If