%dim action,strt,i,lgname,lgpwd,lgpwdmd5,lguserid,sql,pass,name,userinfo,userinfo1,uinfo,styleid,pluginid,pluginlink,pluginname lgname=replace(session(prefix&"lgname"),"'","''") lgpwd=replace(session(prefix&"lgpwd"),"'","''") if isnull(lgname) or lgname="" or isnull(lgpwd) or lgpwd="" then response.redirect"admincheck.asp" else lgpwdmd5=md5(lgpwd) if conn.execute("select top 1 bd from admin where name='"&lgname&"' and password='"&lgpwdmd5&"' and bd=0").eof then response.redirect"admincheck.asp" end if end if action=request.querystring("action") select case action case"sql","execute" strt="执行 SQL 语句" case"style","addstyle","delstyle","editstyle","editstyleok" strt="论坛皮肤设置":application(prefix&"style")="" case"plugin","addplugin","delplugin","editplugin","editpluginok" strt="论坛插件设置":application(prefix&"plugin")="" case"delanyuser","deluser" strt="批量删除用户" case"zl" strt="论坛整理" case"changeinfo","userinfo","editinfo" strt="修改用户资料" end select sub send(str) response.write"
"&str&" |
| <%=strt%> |
|
<%
select case action
case"sql"
%>
<%case"execute"
sql=request.form("sql")
pass=replace(request.form("pass"),"'","''")
if sql="" or pass<>"6kadmin" then
call send("·请填写完整SQL语句和正确填写密码 ·返回重新填写") else On Error Resume Next conn.execute(sql) if err.number<>0 then call send("·SQL语句有错误,具体错误如下: ·"&Err.Description&" ·返回重新填写") else call send("操作成功。") end if end if %> <%case"style" dim allstyle %> <%'未安装-------------------------------------------------------------------- if CheckObject(getXMLDOM) and CheckObject("Scripting.FileSystemObject") then dim pathlist pathlist=getPathList("../skin/")(0) pathlist=split(pathlist,"*") %>
·返回重新填写") else conn.execute("insert into style(stylename,styleid) values('"&stylename&"','"&styleid&"')") call send("添加论坛皮肤 "&stylename&" 成功。") end if %> <%case"delstyle" dim id,used id=checknum(request.querystring("id")) used=conn.execute("select top 1 autouse from style where id="&id&"")(0) if used=true then call send("该皮肤被默认使用,不能被卸载。") else conn.execute("delete*from style where id="&id&"") call send("卸载论坛皮肤成功。") end if %> <%case"editstyle" id=checknum(request.querystring("id")) set rs=conn.execute("select*from style where id="&id&"") %> <%case"editstyleok" id=checknum(request.querystring("id")) stylename=replace(request.form("stylename"),"'","''") styleid=replace(request.form("styleid"),"'","''") if stylename="" or styleid="" then call send("·请填写完整必填资料 ·返回重新填写") else conn.execute("update style set stylename='"&stylename&"',styleid='"&styleid&"' where id="&id&"") call send("修改论坛皮肤成功。") end if case"autouse" dim autouse autouse=checknum(request.form("autouse")) conn.execute("update style set autouse=false") conn.execute("update style set autouse=true where id="&autouse&"") call send("已经成功设定论坛默认皮肤。") '_____________________________________论坛插件 BEGIN_____________________________________ case"plugin" dim allplugin %>
·返回重新填写") else conn.execute("insert into plugin(pluginname,pluginid,pluginlink) values('"&pluginname&"','"&pluginid&"','"&pluginlink&"')") call send("添加论坛插件 "&pluginname&" 成功。") end if %> <%case"delplugin" id=checknum(request.querystring("id")) conn.execute("delete*from plugin where id="&id&"") call send("卸载论坛插件成功。") %> <%case"editplugin" id=checknum(request.querystring("id")) set rs=conn.execute("select*from plugin where id="&id&"") %> <%case"editpluginok" id=checknum(request.querystring("id")) pluginname=replace(request.form("pluginname"),"'","''") pluginid=replace(request.form("pluginid"),"'","''") pluginlink=replace(request.form("pluginlink"),"'","''") if pluginname="" or pluginid="" or pluginlink="" then call send("·请填写完整必填资料 ·返回重新填写") else conn.execute("update plugin set pluginname='"&pluginname&"',pluginid='"&pluginid&"',pluginlink='"&pluginlink&"' where id="&id&"") call send("修改论坛插件成功。") end if '________________________________________________论坛插件 END___________________________________________________________________ case "delanyuser" %> <%case"deluser" dim daynum daynum=checknum(request.form("daynum")) conn.execute("update [user] set del=true where lasttime 整理总帖数成功。 整理用户数成功。 整理各版面版主成功。") %> <%case"changeinfo"%> <%case"userinfo" name=replace(request.form("name"),"'","''") set rs=conn.execute("select top 1 userinfo,mark from [user] where name='"&name&"'") if rs.eof then call send("该用户不存在。") else userinfo=rs("userinfo") userinfo1=split(rs("userinfo"),"|") %> <%end if set rs=nothing %> <%case"editinfo" dim picw,pich,diyname,gxqm,mypic,mark name=replace(request.form("name"),"'","''") userinfo=replace(request.form("userinfo"),"'","''") userinfo=split(userinfo,"|") picw=checknum(Request.Form("picw")) pich=checknum(Request.Form("pich")) mypic=Replace(Request.Form("mypic"),"'","''") mark=checknum(request.form("mark")) if picw="" or pich="" or mypic="" or mark="" then call send("·请填写完整必填资料 ·返回重新填写") else gxqm=Request.Form("gxqm") gxqm=Replace(left(gxqm,255),"'","''") gxqm=replace(gxqm,"|","│") diyname=Request.Form("diyname") diyname=Replace(left(diyname,8),"'","''") diyname=replace(diyname,"|","│") uinfo=userinfo(0)&"|"&userinfo(1)&"|"&userinfo(2)&"|"&userinfo(3)&"|"&userinfo(4)&"|"&mypic&"|"&picw&"|"&pich&"|"&gxqm&"|"&userinfo(9)&"|"&diyname conn.execute("update [user] set userinfo='"&uinfo&"',mark="&mark&" where name='"&name&"'") call send("修改用户资料成功。") end if %> <%end select %> |
|||||||||||||||||