<!--#include file="conn.asp"-->
<!--#include file="head.asp"-->
<!--#include file="md5.asp"-->
<%call main()%>
<%sub main()%>
<table width="100%" border="0" cellspacing="3" cellpadding="3"><tr><td height="20">當(dāng)前位置：<a href=main.asp>管理首頁</a> >> <a href=admin_user.asp>用戶管理</a></td></tr></table>
<%
if Request("action") = "adduser" then
	call adduser()
elseif request("action") = "saveuser" then
	call saveuser()
elseif request("action") = "deluser" then
	call deluser()
else
	call userlist()
end if
%>
<%end sub%>


<%sub userlist()%>
<table width="95%" cellspacing="1" cellpadding="5" bgcolor=#999999 align=center>
  <tr bgcolor=#cccccc><td colspan=5><center><b>所有管理用戶列表</b></td></tr>
  <tr bgcolor=#ffffff><td colspan=5 height=20></td></tr>
<%
set rs = server.CreateObject ("Adodb.recordset")
sql = "select * from [admin] order by userid desc"
rs.open sql,conn,1,1
if rs.eof and rs.bof then
%>
<p align=center><font color=#cc0000>目前還沒有管理用戶！</p>
<%else%>
<tr bgcolor=ffcc00 align=center height=20><td ><b>ID</td><td ><b>用戶名</td><td ><b>密碼</td><td><b>等級</b></td><td ><b>操作</td></tr>
<%do while not rs.EOF%>
<tr bgcolor=ffffff align=center height=20><td><%=rs("userid")%></td><td><%=rs("username")%></td><td><%=rs("userpwd")%></td><td><%=rs("userkey")%></td><td></td></tr>
<%
rs.MoveNext 
loop
end if
rs.Close 
set rs=nothing
%>
<tr bgcolor=#ffffff><td colspan=5>
<table>
<form name=user method="post" action="admin_user.asp?action=saveuser">
<tr><td>用戶名：</td><td><input user="text" name="username" size=15></td><td></td></tr>
<tr><td>密碼：</td><td><input user="text" name="userpwd" size=15></td><td><input type="submit" name="Submit2" value="增加"></td></tr>
</form></table>
</td></tr>
</table><br>
<%end sub%>


<!---保存添加的管理用戶--->
<%sub saveuser()%>
<%if request("username")="" then%>
<script language=javascript>  
alert( "錯(cuò)誤：請輸入用戶名！"  );
location.href = "javascript:history.back()"  
</script>
<%elseif request("userpwd")="" then%>
<script language=javascript>  
alert( "錯(cuò)誤：請輸入密碼！"  );
location.href = "javascript:history.back()"  
</script>

<%else%>
<%
dim userpwd1
set rs = server.CreateObject ("adodb.recordset")
sql = "select * from admin"
	rs.Open sql,conn,1,3
	rs.AddNew
	rs("username") = Request("username")
	rs("userpwd") = md5(Request("userpwd"))
	rs("userkey") = 3
	rs("Addtime") = now()
	rs.Update 
	rs.Close 
set rs=nothing
%>
<script language=javascript>  
alert( "管理用戶添加成功"  );
location.href = "admin_user.asp"  
</script>
<%end if%>
<%end sub%>

<%sub deluser()
sql="delete from admin where userid="&cstr(request("userid"))
conn.execute(sql)
response.redirect "admin_user.asp"
end sub%>