%@LANGUAGE="VBSCRIPT"%> <% ' *** Restrict Access To Page: Grant or deny access to this page MM_authorizedUsers="1" MM_authFailedURL="Login.asp" MM_grantAccess=false If Session("MM_UserName") <> "" Then If (false Or CStr(Session("MM_UserAuthorization"))="") Or _ (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then MM_grantAccess = true End If End If If Not MM_grantAccess Then MM_qsChar = "?" If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&" MM_referrer = Request.ServerVariables("URL") if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString() MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer) Response.Redirect(MM_authFailedURL) End If %> <% ' *** Edit Operations: declare variables MM_editAction = CStr(Request("URL")) ' boolean to abort record edit MM_abortEdit = false ' query string to execute MM_editQuery = "" strdjnum=CStr(Request("djnum")) %> <% ' *** Redirect if djnum exists If (strdjnum <> "") Then MM_dupKeyRedirect="InfoModify.asp" MM_rsKeyConnection=MM_StudentConn_STRING MM_dupKeyUsernameValue = strdjnum MM_dupKeySQL="SELECT djnum FROM StudentInfo WHERE djnum='" & MM_dupKeyUsernameValue & "'" MM_adodbRecordset="ADODB.Recordset" set MM_rsKey=Server.CreateObject(MM_adodbRecordset) MM_rsKey.ActiveConnection=MM_rsKeyConnection MM_rsKey.Source=MM_dupKeySQL MM_rsKey.CursorType=0 MM_rsKey.CursorLocation=2 MM_rsKey.LockType=3 MM_rsKey.Open If Not MM_rsKey.EOF Or Not MM_rsKey.BOF Then ' the username was found - can not add the requested username MM_qsChar = "?" If (InStr(1,MM_dupKeyRedirect,"?") >= 1) Then MM_qsChar = "&" MM_dupKeyRedirect = MM_dupKeyRedirect & MM_qsChar & "djnum=" & MM_dupKeyUsernameValue & "&Err=True" Response.Redirect(MM_dupKeyRedirect) End If MM_rsKey.Close End If %> <% ' *** Insert Record: set variables If (CStr(Request("MM_insert")) <> "") Then MM_editConnection = MM_StudentConn_STRING MM_editTable = "StudentInfo" strdjnum = Request.Form("djnum") strdjnum = strdjnum + 1 MM_fieldsStr = "djnum|value|Name|value|Sex|value|Folk|value|place|value|politics|value|Birthday|value|enrollment|value|housemaster|value|TelNum|value|HouseAddress|value|remark|value|kpleixing|value|kpname|value|kpaddress|value|kptel|value|kpshuihao|value|kpbank|value|kpzhanghao|value|xyj1|value|xyj2|value|xyj3|value|tsj1|value|tsj2|value|tsj3|value|hgj1|value|hgj2|value|hgj3|value|tpj1|value|tpj2|value|tpj3|value|username|value|pin|value|xyjprice|value|tsjprice|value|hgjprice|value|tpjprice|value|goumainum|value|yunfei|value|piao|value|piao2|value|fkfs1|value|fkfs2|value|fkfs3|value|fkfs4|value|diaohuo|value|dhid|value|dhmodel|value|dhnum|value" MM_columnsStr = "djnum|',none,''|Name|',none,''|Sex|',none,''|Folk|',none,''|place|',none,''|politics|',none,''|Birthday|',none,NULL|enrollment|',none,NULL|housemaster|',none,''|TelNum|',none,''|HouseAddress|',none,''|remark|',none,''|kpleixing|',none,''|kpname|',none,''|kpaddress|',none,''|kptel|',none,''|kpshuihao|',none,''|kpbank|',none,''|kpzhanghao|',none,''|xyj1|',none,''|xyj2|',none,''|xyj3|',none,''|tsj1|',none,''|tsj2|',none,''|tsj3|',none,''|hgj1|',none,''|hgj2|',none,''|hgj3|',none,''|tpj1|',none,''|tpj2|',none,''|tpj3|',none,''|username|',none,''|pin|',none,''|xyjprice|',none,''|tsjprice|',none,''|hgjprice|',none,''|tpjprice|',none,''|goumainum|',none,''|yunfei|',none,''|piao|',none,''|piao2|',none,''|fkfs1|',none,''|fkfs2|',none,''|fkfs3|',none,''|fkfs4|',none,''|diaohuo|',none,''|dhid|',none,''|dhmodel|',none,''|dhnum|',none,''" ' create the MM_fields and MM_columns arrays MM_fields = Split(MM_fieldsStr, "|") MM_columns = Split(MM_columnsStr, "|") ' set the form values For i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_fields(i+1) = CStr(Request.Form(MM_fields(i))) Next End If %> <% ' *** Insert Record: construct a sql insert statement and execute it If (CStr(Request("MM_insert")) <> "") Then ' create the sql insert statement MM_tableValues = "" MM_dbValues = "" For i = LBound(MM_fields) To UBound(MM_fields) Step 2 FormVal = MM_fields(i+1) MM_typeArray = Split(MM_columns(i+1),",") Delim = MM_typeArray(0) If (Delim = "none") Then Delim = "" AltVal = MM_typeArray(1) If (AltVal = "none") Then AltVal = "" EmptyVal = MM_typeArray(2) If (EmptyVal = "none") Then EmptyVal = "" If (FormVal = "") Then FormVal = EmptyVal Else If (AltVal <> "") Then FormVal = AltVal ElseIf (Delim = "'") Then ' escape quotes FormVal = "'" & Replace(FormVal,"'","''") & "'" Else FormVal = Delim + FormVal + Delim End If End If If (i <> LBound(MM_fields)) Then MM_tableValues = MM_tableValues & "," MM_dbValues = MM_dbValues & "," End if MM_tableValues = MM_tableValues & MM_columns(i) MM_dbValues = MM_dbValues & FormVal Next MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")" If (Not MM_abortEdit) Then ' execute the insert Set MM_editCmd = Server.CreateObject("ADODB.Command") MM_editCmd.ActiveConnection = MM_editConnection MM_editCmd.CommandText = MM_editQuery MM_editCmd.Execute MM_editCmd.ActiveConnection.Close If (MM_editRedirectUrl <> "") Then Response.Redirect(MM_editRedirectUrl) End If End If End If %>
| |
||||
|
|
||||
|
<%=copy%> |