<%response.expires=0%>
<!--#include file="../inc/conn.asp"-->
<%
userid=Session("userid")
userlevel=Session("userlevel")
if userid="" or userlevel="" then
  call msgbox("請(qǐng)重新登陸！",3)
end if
if not isnumeric(userid) or not isnumeric(userlevel) then
  call msgbox("請(qǐng)重新登陸！",3)
end if
userlevel=CCur(userlevel)
if not userlevel=1 then
  call msgbox("管理員級(jí)別夠！",1)
end if

op=strFilter(request("op"),3)
if op="" then call msgbox("操作出錯(cuò)！請(qǐng)確定操作行為！",1)
if not (op="add" or op="del") then call msgbox("操作出錯(cuò)！請(qǐng)確定操作行為！",1)

sourceid=strFilter(request.form("sourceid"),20)
sourcetext=strFilter(request.form("sourcetext"),20)
sourcevalue=strFilter(request.form("sourcevalue"),500)
if sourceid><"" and not isnumeric(sourceid) then
  call msgbox("請(qǐng)重新確定刪除對(duì)象！",1)
end if

if op="add" then
  rs.open "insert into source(text,value) values('"&sourcetext&"','"&sourcevalue&"')",conn,1,3
  call msgbox("來(lái)源 "&sourcetext&" 添加成功！","../base")
else
  if sourceid><"" and isnumeric(sourceid) then
    rs.open "delete from source where id="&sourceid,conn,1,3
  end if
  call msgbox("來(lái)源 "&sourcetext&" 成功刪除！","../base")
end if


Set rs=nothing
Set conn=nothing
response.redirect "default.asp"
response.end
%>