<%@ Language=VBScript %>
<!--#include file = "../dbase.asp"-->
<%
dim rs
set rs=server.CreateObject("adodb.recordset")
if request.QueryString("way")="modify" then
sql=" SELECT n_ID, c_UserID, v_LoginName, v_LNEncode, v_LoginPwd, v_IdentityCard, "&_
    " v_PwdQuestion, v_PwdAnswer, c_State"&_
   	" FROM hxdf_user_login "&_
   	" WHERE n_ID="&clng(request.QueryString("id"))
   	response.Write sql
rs.Open sql,conn,1,3
	if rs.Eof then
		response.Redirect("../error/Error.asp?steps=-1&errInfo=<li>修改失敗，編號不存在</li>")
		response.End()
	else
		if request.Form("LoginName")<>"" then
			rs("v_LoginName")=request.Form("LoginName")
			rs("v_LNEncode")=crack(request.form("LoginName"))
		end if
		if request.Form("NewPwd")<>"" then
			rs("v_LoginPwd")=crack(request.Form("NewPwd"))
		end if
		if request.Form("IdentityCard")<>"" then
			rs("v_IdentityCard")=request.Form("IdentityCard")
		end if
		if request.Form("PwdQuestion")<>"" then
			rs("v_PwdQuestion")=request.Form("PwdQuestion")
		end if
		if request.Form("PwdAnswer")<>"" then
			rs("v_PwdAnswer")=request.Form("PwdAnswer")
		end if
		if request.QueryString("state")<>"" then
			rs("c_State")=request.QueryString("state")
		end if
		rs.Update
	end if
elseif request.QueryString("way")="delete" then
		sql=" SELECT * FROM hxdf_user_login WHERE n_ID="&clng(request.QueryString("id"))
		rs.Open sql,conn,1,2
		if rs.EOF then
		response.Redirect("../error/Error.asp?steps=-1&errInfo=<li>不能刪除，編號不存在</li>")
		response.End()
		else
		rs.Delete
		end if
end if
rs.Close: set rs=nothing
		response.Redirect("user_manage.asp")
		response.End
		%>