<!--#include file=conn.asp--> 
<!--#include file=char.asp--> 

<%
id=cint(request.querystring("id"))
userid=HTMLEncode(request.querystring("userid"))
set rs=conn.execute("select * from zhai where UserID='"&userid&"' and id="&id)

if rs.eof then
	response.write"<SCRIPT language=JavaScript>alert('對不起，請不要非法刪除她人的數據，您的IP已被我們記錄，請返回！');"
	response.write"javascript:history.go(-1);</SCRIPT>"
	response.end
end if

filename="article/"&trim(rs("filepath"))&"/"&trim(rs("htmurl"))

	Set fso = Server.CreateObject("Scripting.FileSystemObject")   
	if fso.FileExists(server.mappath(filename)) then   
		fso.DeleteFile(server.mappath(filename))
	end if
	
	sql="delete from zhai where id="&id
	conn.execute(sql)
	
	sql="delete from visit where ZhaiID="&request("id")
	conn.execute(sql)
	
	sql="update myuser set ZhaiNum=ZhaiNum-1 where UserID='"&userid&"'"
	set rsupdate=conn.execute(sql)
	
	sql="delete from visit where ZhaiID="&id
	conn.execute(sql)
	
	rs.close
	set rs=nothing
	conn.close
	set conn=nothing
	
	response.redirect "myzhai.asp"
	response.end

%>