<!--#include file="sqlstr.asp"-->
<!--#include file="checked.asp"-->
<!--#include file="opendb.asp"-->
<%
sub stafcontrol(href)
On Error Resume Next
oabusyuserdept=request.cookies("oabusyuserdept")


if request("forbid")="禁用" then
set conn=opendb("oabusy","conn","accessdsn")
count=0
count1=0
allid=""
condition=""
notcondition=""
for each id in request("allid")
count1=count1+1
allid=allid & id
if count1<request("allid").count then
allid=allid+","
end if
next
for each idno in request("forbidid")
count=count+1
condition=condition+"id=" & idno
notcondition=notcondition+"id<>" & idno
if count<request("forbidid").count then
condition=condition+" or "
notcondition=notcondition+" and "
end if
next
if condition<>"" then
sql = "update userinf set forbid='yes' where " & condition
conn.Execute sql
end if
if notcondition<>"" then
sql = "update userinf set forbid='no' where id in (" & allid & ") and " & notcondition
else
sql = "update userinf set forbid='no' where id in (" & allid & ")"
end if
conn.Execute sql
end if




'打開數據庫顯示部門是oabustuserdept的用戶
set conn=opendb("oabusy","conn","accessdsn")
set rs=server.createobject("adodb.recordset")
sql="select * from userinf where userdept=" & sqlstr(oabusyuserdept) & " and userlevel='員工'"
rs.open sql,conn,1
%>
<br>
<form action="<%=href%>" method=post>
<table border=1 width=400>
<tr>
<td align=center><b>姓名</b></td>
<td align=center><b>用戶名</b></td>
<td align=center><b>密碼</b></td>
<td width="30" align="center"><input type="submit" value="禁用" name="forbid"></td>
</tr>
<%
while not rs.eof and not rs.bof
%>

<tr>
<td align=center><%=rs("name")%></td>
<td align=center><%=rs("username")%></td>
<td align=center><%=rs("password")%></td>
<td align=center><input type="checkbox" name="forbidid" value="<%=rs("id")%>"<%=checked(rs("forbid"),"yes")%>><input type="hidden" name="allid" value="<%=rs("id")%>">
</td>
</tr>
<%
rs.movenext
wend
%>
</table>
</form>
<%
end sub
%>