<%response.buffer=true%>

<!--#include file="conn.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="../fuction.asp"-->
<% id=nosql(request.querystring("id"))
url=nosql(request.form("url"))
 if id="" or  not isnumeric(id) then
response.write"錯誤的請求"
response.end 
end if

bid=nosql(int(request.form("bid")))
username=nosql(session("username"))
 password=nosql(session("userpassword"))

if username="" or password="" then
response.redirect"login.asp"
 end if 

if session("manbid")=ture then
 


set rs=server.createobject("adodb.recordset")
sql="select * from book where id="&id
rs.open sql,conn,3,3
  rs("bid")=bid
rs.update
rs.close
set rs=nothing
response.redirect url

else
response.write"<script language='javascript'>alert('你沒權限！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end 
end if 
%>