<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="conn.asp"-->
<!--#include file="inc/userchk.asp"--><!--#include file="Inc/SafeRequest.asp"-->
<%
Set rs=Server.CreateObject("Adodb.Recordset")
sql="select  * from goods_info where goods_id="&request("goods_id")&" and user_id="&session("user_id")&""
rs.open sql,conn,1,3
if rs.eof or rs.bof then
response.write "<script language='javascript'>" & VbCRlf
response.write "alert('非法操作!');" & VbCrlf
response.write "history.go(-1);" & vbCrlf
response.write "</script>" & VbCRLF
else
if rs("goods_pic")<>"" then
tempfpath=rs("goods_pic")
FiLePaTh = Server.MapPath(tempfpath)
Set fso = CreateObject("Scripting.FileSystemObject")
fso.DeleteFile(FiLePaTh)
Set fso = nothing
end if
delsql="delete  * from goods_info where goods_id="&request("goods_id")&" and user_id="&session("user_id")&""
conn.execute delsql
end if
response.redirect("goods.asp")
%>