admin_user.asp

教师评估系统

<!-- #include file="AdminCls.asp" -->
<!-- #include file="inc/MD5.asp" -->
<%
CheckLogin()
Log("")

UserName=HTMLEncode(Request("UserName"))
RoleID=HTMLEncode(Request("RoleID"))
RoleName=HTMLEncode(Request("RoleName"))
Description=HTMLEncode(Request("Description"))

select case Request("menu")
case "Default"
Default
case "CreateRole"
if RoleName=empty then Error2("您没有输入角色名称")
Conn.Execute("insert into [WxRoles] (Name) values ('"&RoleName&"')")
Default
case "ViewRole"
ViewRole
case "UpRole"
if RoleName=empty then Error2("您没有输入角色名称")
MaxUp=ChkNumeric(Request.Form("MaxUp"))
MaxUp2=ChkNumeric(Request.Form("MaxUp2"))
if MaxUp>0 then MaxUpSql=",MaxUp="&MaxUp&""
if MaxUp2>0 then MaxUpSql2=",MaxUp2="&MaxUp2&""
Conn.Execute("update [WxRoles] set Name='"&RoleName&"',Description='"&Description&"'"&MaxUpSql&MaxUp2Sql&" where id="&RoleID&"")
AdminSucc "编辑角色","Admin_User.asp?menu=Default"
case "DelRole"
if RoleID<4 then Error2("该角色为系统内置角色，无法删除")
if Not Conn.Execute("select ID from [WxUsers] where UserRoleID="&RoleID&"" ).Eof then Error2("只能删除没有成员的角色组！")
Conn.Execute("delete from [WxRoles] where id="&RoleID&"")
AdminSucc "删除角色","Admin_User.asp?menu=Default"
case "kill"
n2=HTMLEncode(Request("n2"))
n1=HTMLEncode(Request("n1"))
if n2=n1 then Error2("没有设置新名称")
if Conn.Execute("select ID from [WxUsers] where UserName='"&n1&"'").Eof Then Error2("用户 "&n1&" 不存在")
if Conn.Execute("select ID from [WxUsers] where UserName='"&n2&"'").Eof Then
Conn.Execute("update [WxUsers] set UserName='"&n2&"' where UserName='"&n1&"'")
Conn.Execute("update [WxThreads] set UserName='"&n2&"' where UserName='"&n1&"'")
Conn.Execute("update [WxThreads] set LastName='"&n2&"' where LastName='"&n1&"'")
Conn.Execute("update [WxPosts] set UserName='"&n2&"' where UserName='"&n1&"'")
Conn.Execute("update [WxAdmin] set Forumname='"&n2&"' where Forumname='"&n1&"'")
Error2("将用户 "&n1&" 改成 "&n2&" 成功")
else
Error2("用户 "&n2&" 已经存在，不能改名")
end if
case "Rename"
Rename
case "Activation"
Activation
case "EditUser"
EditUser
case "Showall"
Showall
case "Showallok"
Showallok
case "UserDelTopic"
UserDelTopic
case "UserDel"
UserDel
case "Userok"
Userok
case "UserRank"
UserRank
case "UserRankUp"
if Request.Form("RankName")<>"" then
Conn.Execute("insert into [WxRanks] (RankName,PostingCountMin,RankIconUrl) values ('"&Request.Form("RankName")&"','"&Request.Form("PostingCountMin")&"','"&Request.Form("RankIconUrl")&"')")
end if
for each ho in Request.Form("id")
Conn.Execute("update [WxRanks] set RankName='"&Request.Form("RankName"&ho)&"',PostingCountMin='"&Request.Form("PostingCountMin"&ho)&"',RankIconUrl='"&Request.Form("RankIconUrl"&ho)&"' where id="&ho&"")
next
AdminSucc "编辑级别","?menu=UserRank"
case "UserRankDel"
Conn.Execute("delete from [WxRanks] where id="&Request("RankID")&"")
AdminSucc "删除级别","?menu=UserRank"
case "fix"
Conn.Execute("update [WxUsers] set Userpass='"&md5("123456")&"'  where UserName='"&UserName&"'")
AdminSucc "将"&UserName&"的密码还原为123456 ",""
case "activationok"
for each ho in Request.Form("id")
Conn.Execute("update [WxUsers] set UserStatus=1 where id="&ho&"")
next
AdminSucc "审核用户",""
case "UserProcess"
UserProcess
case "UserProcessok"
UserProcessok
end select

sub Default
WxManageHead("创建/编辑角色，用来控制一组用户在不同版块的权限。")
%><div class="tb dt">
<div id="tt">角色管理</div>
<%
sql="select * from [WxRoles] order by id"
Set Rs=Conn.Execute(sql)
Do While Not Rs.Eof 
%>
<div class="tc"><a href="?menu=ViewRole&RoleId=<%=Rs("id")%>"><b><%=Rs("Name")%></b></a><br /><%=Rs("Description")%></div>
<%
Rs.MoveNext
loop
Rs.Close
%>
<div class="tc">
<u>注意:Everyone、超级版主、管理员三个角色是系统性存在的，因为删除会导致系统瘫痪，故不可删除</u>
</div>
<div class="tc">
<form method="post" name="form" action="?menu=CreateRole">
<input name="RoleName" onclick="this.value=''" onchange="javascript:VerifyText(this,'角色名称','bt1');" size="50" value="角色名称" /> <input type="submit" value="创建" id="bt1" disabled="disabled" /></form>
</div>
</div>
<%
end sub

sub ViewRole
if  RoleId<4 then PostDisabled=" disabled=""disabled"""
Rs.Open "select * from [WxRoles] where id="&RoleId&"",Conn,1
%><form method="post" name="form" action="?menu=UpRole&RoleId=<%=RoleId%>">
<div class="tb dt">
<div id="tt">编辑角色</div>
<div class="tc b cb">
<div class="fl r si w3"><b>名称</b></div>
<div class="fl si"><input name="RoleName" size="50" value="<%=Rs("Name")%>" /></div>
</div>
<div class="tc b cb">
<div class="fl r i w3"><b>描述</b><br />对该角色的描述</div>
<div class="fl i"><input name="Description" size="50" value="<%=Rs("Description")%>" /></div>
</div>
<div class="tc b cb">
<div class="fl r i w3"><b>上传文件夹的最大容量 (byte)</b><br />该角色拥有的上传文件夹的容量</div>
<div class="fl i"><input name="Maxup" size="50" value="<%=Rs("Maxup")%>" /></div>
</div>
<div class="tc b cb">
<div class="fl r i w3"><b>单个帖子附件的大小 (byte)</b><br />该角色在发帖子时可上传附件的最大大小</div>
<div class="fl i"><input name="Maxup2" size="50" value="<%=Rs("Maxup2")%>" /></div>
</div>
<div class="tc ar"><input type="button"<%=PostDisabled%> onclick="go('?menu=DelRole&RoleId=<%=RoleId%>')" value="删除" />&nbsp;<input type="submit" value="保存" /></div>
</div>
</form>
<%
Rs.close
end sub

sub Rename
%>
<form method="post" action="?menu=kill">
<div class="tb dt">
<div id="tt">更改用户名称</div>
<div class="tc">
 请输入旧的用户名：<input name="n1" maxlength="16" /><br />
 请输入新的用户名：<input size="15" name="n2" maxlength="16" /><br />
 <input type="submit" id="submit" value="更改" />
</div>
</div>
</form>
<%
end sub

sub UserProcess
%><form method="post" name="form" action="Admin_User.asp?menu=UserProcessok">
<div class="tb dt">
<div id="tt">批量删除用户</div>
<div class="tc b">
登录次数小于 <input name="mindegree" type="text" value="1" size="6" /> 次、上次登录距今天已隔 <input name="minday" type="text" value="180" size="6" /> 天、发帖数少于 <input name="minpost" type="text" value="1" size="6" /> 的 <select name="minRoleID">
<%
sql="select * from [WxRoles] where ID > 0 order by ID"
Set Rs1=Conn.Execute(sql)
Do While Not Rs1.Eof 
%><option value="<%=Rs1("ID")%>"<%if Rs1("ID")=3 then%> selected="selected"<%end if%>><%=RS1("Name")%></option>
<%
Rs1.MoveNext
loop
Rs1.Close
%></select> 
<input type="button" name="button" onclick="XmlPost('form','result')" value="确定" />
</div>
<div class="tc b">
<b>说明：</b><br />
⒈本操作将永久删除符合条件用户的所有资料（包括帖子、短信、工会、资料等一切数据）<br />
⒉使用前请备份数据库，以免造成不必要的损失<br />
⒊“发帖数”指的是“主题数与回帖数的和”<br />
⒋本操作只删除您所设置级别的用户，不会删除其他级别的用户</td>
</div>
<div class="tc"><div id="result"></div></div>
</div>
</form>
<%
end sub

sub UserProcessok%>
<div class="tb dt">
<div id="tt">批量删除用户结果</div>
<div class="intro cb">
<div class="fl r w2">用户名</div>
<div class="fl r w6">原因</div>
<div class="fl w1a">操作</div>
</div><%
i=0
minRoleID=Request.Form("minRoleID") '级别
if ChkNumeric(minRoleID)=0 Then CloseDataBase
sql="select UserName,UserRoleID,UserDegree,PostTopic,Postrevert,UserLandTime from [WxUsers] where UserRoleID="&minRoleID
mindegree=int(Request.Form("mindegree"))
minday=int(Request.Form("minday"))
minpost=int(Request.Form("minpost"))
sql=sql&" and UserDegree<"&mindegree&" and DateDiff("&SqlChar&"d"&SqlChar&",UserLandTime,"&SqlNowString&")>"&minday&" "
Set Rs=Conn.Execute(sql)
Do While Not Rs.Eof
Name=Rs(0)
Degree=Rs(2)
PostTopic=Rs(3)
Postrevert=Rs(4)
UserLandTime=Rs(5)
TotalPost=int(PostTopic+Postrevert)
if (LCase(Name)<>LCase(CookieUserName)) and (TotalPost<minpost) Then
DelUserInfo(Name)
i=i+1%>
<div class="tc b cb">
<div class="fl r ac w2"><%=Name%></div>
<div class="fl r w6"><%="此用户登录 "&Degree&" 次，发帖 "&TotalPost&" 篇，上次登录于 "&UserLandTime%></div>
<div class="fl ac w1a">已删除</div>
</div><%
end if
Rs.MoveNext
Loop
Rs.Close%>
<div class="tc ac">以上是本次操作删除用户的详细名单。本次操作的条件是：登录少于<%=mindegree%>次、发帖少于<%=minpost%>篇、<%=minday%>天未登录。本次操作共删除符合条件的 <b><%=i%></b> 个用户。</div>
</div>
<%
CloseDataBase
end sub

sub Showall
WxManageHead("系统共有用户 "&Conn.Execute("select count(id)from [WxUsers]")(0)&" 人")
%>
<div class="tb dt">
<div id="tt">查找用户</div>
<div class="tc">
<form method="post" action="?menu=EditUser">
 <fieldset><legend>快速查找用户</legend>
 用户名：<input size="13" name="UserName" />&nbsp;<input type="submit" id="submit" value=" 确定 " />
 </fieldset>
</form>
<br />
<form method="post" action="?menu=Showallok">
 <fieldset><legend>高级查找条件</legend>
 用户角色：<select name="UserRoleID"><option value="">所有用户</option>
<%
sql="select * from [WxRoles] where ID > 0 order by ID"
Set Rs=Conn.Execute(sql)
Do While Not Rs.Eof
Response.write "    <option value="""&Rs("ID")&""">"&Rs("Name")&"</option>"
Rs.MoveNext
loop
Rs.Close
%>
</select> <br />
  用户名包含：<input size="45" name="UserName" /><br />
  基本信息包含：<input size="45" name="UserInfo" /><br />
  即时通讯包含：<input size="45" name="UserIM" /><br />
  Email包含：<input size="45" name="Usermail" /><br />
  主页包含：<input size="45" name="Userhome" /><br />
  签名包含：<input size="45" name="UserSign" /><br />
  注册日期包含：<input size="45" name="UserRegTime" /><br />
  最后登录时间包含：<input size="45" name="UserLandTime" /><br />
  最后登录IP包含：<input size="45" name="UserLastIP" /><br />
  <div class="ac"><input type="submit" id="submit" value=" 搜索 " /></div>
</fieldset>
</form>
</div>
</div><%
end sub

sub Showallok
%><form method="post" action="?menu=UserDel">
<div class="tb dt">
<div id="tt">查找用户结果</div>
<div class="intro cb">
<div class="fl r w1a">用户名</div>
<div class="fl r w1a">Email</div>
<div class="fl r w0c">短讯</div>
<div class="fl r w0">发帖数</div>
<div class="fl r w1a">注册时间</div>
<div class="fl r w1a">最后登录时间</div>
<div class="fl r w0">最后登录IP</div>
<div class="fl w0">操作</div>
</div>
<%
if Request.Form("UserRoleID")<>"" then item=""&item&" and UserRoleID="&Request.Form("UserRoleID")&""
if UserName<>"" then item=""&item&" and UserName like '%"&UserName&"%'"
if Request.Form("Usermail")<>"" then item=""&item&" and Usermail like '%"&Request.Form("Usermail")&"%'"
if Request.Form("Userhome")<>"" then item=""&item&" and Userhome like '%"&Request.Form("Userhome")&"%'"
if Request.Form("UserInfo")<>"" then item=""&item&" and UserInfo like '%"&Request.Form("UserInfo")&"%'"
if Request.Form("UserIM")<>"" then item=""&item&" and UserIM like '%"&Request.Form("UserIM")&"%'"
if Request.Form("UserSign")<>"" then item=""&item&" and UserSign like '%"&Request.Form("UserSign")&"%'"
if Request.Form("UserRegTime")<>"" then item=""&item&" and UserRegTime like '%"&Request.Form("UserRegTime")&"%'"
if Request.Form("UserLandTime")<>"" then item=""&item&" and UserLandTime like '%"&Request.Form("UserLandTime")&"%'"
if Request.Form("UserLastIP")<>"" then item=""&item&" and UserLastIP like '%"&Request.Form("UserLastIP")&"%'"

item="where"&item&""
item=Replace(item,"where and","where")

if item="where" then
sql="[WxUsers]"
else
sql="[WxUsers] "&item&""
end if

TotalCount=Conn.Execute("select count(ID) From "&sql&"")(0) '获取数据数量
PageSetup=40 '设定每页的显示数量
TotalPage=Abs(Int(TotalCount/PageSetup*(-1))) '总页数
PageCount = cint(Request.QueryString("PageIndex")) '获取当前页
if PageCount <1 then PageCount = 1
if PageCount > TotalPage then PageCount = TotalPage
if PageCount<11 then
Set Rs=Conn.Execute(sql)
else
rs.Open sql,Conn,1
end if
if TotalPage>1 then RS.Move (PageCount-1) * pagesetup