admin_admin.asp

淘客网上商店网站程序 淘客网上商店网站程序 淘客网上商店网站程序

<!--#include file="Inc/Const.asp"-->
<!--#include file="../inc/Cl_Md5.asp"-->
<%
if Cint(Cl.Admin_Purview(0))<>1 then
	Cl.ShowErr("<br /><li>您无此操作权限！</li>")
end if
const PageSize=20
dim iCount
dim Action,sPurview,Purview_Other
Dim SearchType,Field,Keyword
SearchType	= Cl.GetClng(request("SearchType"))
Field		= Trim(request("Field"))
Keyword		= Trim(request("Keyword"))
Action		= Trim(request("Action"))
Header
%>
<script language="JavaScript" type="text/javascript">
function ChkarrClassPurview(cid,stype)
{
	if(stype==3){
		document.getElementById('arrClass_'+cid).height = '200';
		}
	else{
		document.getElementById('arrClass_'+cid).height = '0';
		}
}
</script>
<table width="100%" border="0" align="center" cellpadding="2" cellspacing="1" class="border">
  <tr class="title"> 
    <td height="22" colspan="3" align="center"><strong>管 理 员 管 理</strong></td>
  </tr>
  <tr class="tdbg"> 
    <td width="70" height="30"><strong>管理导航：</strong></td>
    <td height="30"><a href="Admin_Admin.asp">管理员管理首页</a>&nbsp;|&nbsp;<a href="Admin_Admin.asp?Action=Add">新增管理员</a></td>
	<form action="?" method="post" name="Searchform2" id="Searchform2">
	<td><b>管理员搜索：</b>
		<select name="Field" id="Field">
		<option value="UserName">后台用户名</option>
		<option value="AddUser" selected="selected">前台用户名</option>
		</select>
		<input name="Keyword" type="text" id="Keyword" size="20" maxlength="30" value="<%=Keyword%>" />
		<input type="submit" name="Submit2" value=" 搜 索 " />
		<input name="SearchType" type="hidden" id="SearchType" value="1" />
	</td>
	</form>
  </tr>
</table>
<br />
<%
Select Case Action
Case "Add", "ModifyPurview"
	call InfoPurview()
Case "SaveAdd"
	call SaveAdd()
Case "ModifyPwd"
	call ModifyPwd()
Case "SaveModifyPwd"
	call SaveModifyPwd()
Case "SaveModifyPurview"
	call SaveModifyPurview()
Case "Del"
	call DelAdmin()
Case else
	call main()
End Select
footer

sub main()
	CurrentPage	= Cl.GetClng(request("page"))
	Set rs=Server.CreateObject("Adodb.RecordSet")
	sql="select ID,UserName,Password,Purview,Purview_Other,arrClassMaster,arrClassCheck,arrClassInput,AddUser,LastLoginIP,LastLoginTime,LoginTimes from Cl_Admin " 
	If SearchType=1 And Keyword<>"" Then
		Select Case Field
		Case "AddUser"
		sql=sql & " Where AddUser='"&Cl.CheckStr(Keyword)&"'"
		Case "UserName"
		sql=sql & " Where UserName='"&Cl.CheckStr(Keyword)&"'"
		Case Else
		sql=sql & " Where AddUser='"&Cl.CheckStr(Keyword)&"'"
		End Select
	End If
	sql=sql & " order by id"
	OpenConn : rs.Open sql,Conn,1,1
%>
<table width="100%" border="0" align="center" cellpadding="2" cellspacing="1" class="border">
<form name="myform" method="Post" action="Admin_Admin.asp" onsubmit="return confirm('确定要删除选中的管理员吗？');">
  <tr align="center" class="title">
    <td  width="30" height="22"><strong> 序号</strong></td>
    <td height="22"><strong>后台用户/前台用户</strong></td>
    <td width="80"><strong>管理权限</strong></td>
    <td width="100"><strong>最后登录IP</strong></td>
    <td width="120"><strong>最后登录时间</strong></td>
    <td width="60"><strong>登录次数</strong></td>
    <td width="150" height="22"><strong> 操 作</strong></td>
  </tr>
  <%
if Rs.Bof and Rs.Eof then
	rs.Close : set rs=Nothing
Else
	TotalPut = Rs.recordcount
	if (TotalPut mod PageSize)=0 then
		TotalPages = TotalPut \ PageSize
	else
		TotalPages = TotalPut \ PageSize + 1
	end if
	if CurrentPage > TotalPages then CurrentPage=TotalPages
	if CurrentPage < 2 then
		CurrentPage=1
	else
		Rs.move (CurrentPage-1)*PageSize
	end if
	SQL = Rs.GetRows(PageSize)
	Rs.close : set Rs=Nothing
	Dim PurviewStr
	For i=0 to Ubound(SQL,2)
  %>
  <tr align="center" class="tdbg" onMouseOut="this.className='tdbg'" onMouseOver="this.className='tdbg2'"> 
    <td><%=SQL(0,i)%></td>
    <td align="left"><%
	if SQL(1,i)=Cl.Admin_Info(1) then
		response.write "<font color=""red""><b>" & SQL(1,i) & "</b></font>"
	else
		response.write SQL(1,i)
	end if%>/<font color="blue"><%=SQL(8,i)%></font></td>
    <td><%
	PurviewStr = Split(SQL(3,i),",")
	If CLng(PurviewStr(0))=1 Then
		response.write "<font color=""red""><b>超级管理</b></font>"
	Else
		response.write "<font color=""blue""><b>普通管理</b></font>"
	End If
	PurviewStr = Empty
	%></td>
    <td><%=SQL(9,i)%> </td>
    <td><%=SQL(10,i)%> </td>
    <td><%=SQL(11,i)%> </td>
    <td><%
	response.write "<a href='Admin_Admin.asp?Action=ModifyPurview&ID=" & SQL(0,i) & "'>修改权限</a>"
	if SQL(1,i)<>Cl.Admin_Info(1) then
		response.write "&nbsp;&nbsp;<a href='Admin_Admin.asp?Action=ModifyPwd&ID=" & SQL(0,i) & "'>修改密码</a>"
		response.write "&nbsp;&nbsp;<a href='Admin_Admin.asp?Action=Del&ID=" & SQL(0,i) & "' onClick=""return confirm('确定要删除此管理员吗？\n\n注意：此操作将不能恢复！');"">删除</a>"
	else
		response.write "&nbsp;&nbsp;<a href='Admin_ModifyPwd.asp'>修改密码</a>"
		response.write "&nbsp;&nbsp;<font color='#888888'>删除</font>"
	end if
	%> </td>
  </tr>
  <%
	Next
	SQL=Empty
End if
%>
</form></table>
<%
	Response.write Cl.ShowPage("Admin_Admin.asp",TotalPut,PageSize,"个","管理员")
End Sub

Sub InfoPurview()
Dim frmAction
if Action="ModifyPurview" then
	dim UserID
	UserID=Cl.GetClng(Request("ID"))
	if UserID = 0 then
		Cl.ShowErr("<br /><li>请指定要修改的管理员ID</li>")
	end if
	sql="Select * from Cl_Admin where ID=" & UserID
	Set rs=Cl.Execute(sql)
	if rs.Bof and rs.EOF then
		Cl.ShowErr("<br /><li>不存在此用户！</li>")
	end if
	sPurview = Split(rs("Purview"),",")
	Purview_Other = rs("Purview_Other")
	for i=0 to Ubound(sPurview)
		sPurview(i) = Cint(sPurview(i))
	next
	'Response.write Ubound(sPurview)
	frmAction="Modify"
%>
<script language="JavaScript" type="text/javascript">
function CheckModifyPurview()
{
  if (document.form1.Purview_0[1].checked==true){
	GetarrClassPurview();
  }
	//document.write (document.form1.arrClassInput.value);
    //  return false;
}
</script>
<form method="post" action="Admin_Admin.asp" name="form1" onsubmit="javascript:CheckModifyPurview();">
  <table width="100%" border="0" align="center" cellpadding="2" cellspacing="1" class="border" >
    <tr class="title"> 
      <td height="22" colspan="2"> <div align="center"><font size="2"><strong>修 改 管 理 员 权 限</strong></font></div></td>
    </tr>
    <tr> 
      <td width="300" class="tdbg" align="right"><strong>用 户 名：</strong></td>
      <td class="tdbg"><%=rs("UserName")%> <input name="ID" type="hidden" value="<%=UserID%>"> <input name="Action" type="hidden" id="Action" value="SaveModifyPurview"></td>
    </tr>
<%
else
	sPurview=Split("1,4,4,4,4,4,4",",")
	Purview_Other="modifypwd"
	for i=0 to Ubound(sPurview)
		sPurview(i)=Cint(sPurview(i))
	next
	frmAction="Add"
%>
<script language="JavaScript" type="text/javascript">
function CheckAdd()
{
  if(document.form1.UserName.value=="")
    {
      alert("用户名不能为空！");
	  document.form1.UserName.focus();
      return false;
    }

  if(document.form1.AddUser.value=="")
    {
      alert("前台用户不能为空！");
	  document.form1.AddUser.focus();
      return false;
    }
        
  if(document.form1.Password.value=="")
    {
      alert("密码不能为空！");
	  document.form1.Password.focus();
      return false;
    }
    
  if((document.form1.Password.value)!=(document.form1.PwdConfirm.value))
    {
      alert("初始密码与确认密码不同！");
	  document.form1.PwdConfirm.select();