<%@LANGUAGE="VBScript" CODEPAGE="936"%>
<!--#include file="session.asp" -->
<!--#include file="conn.asp" -->
<%
'刪除留言
MssgID=request.QueryString("id")
If MssgID="" or IsNumeric(MssgID)=False then
	response.Redirect("error.asp")
end if
strsql="select mssguser from mssg where mssgid="&MssgID
set rs=conn.execute(strsql)
if rs("mssguser")=session("username") or session("usergroup")=3 then
	strsql="delete from mssg where mssgid="&MssgID
	conn.execute(strsql)
else
	response.Redirect("error.asp")
end if
rs.close
set rs=nothing
CloseDatabase
response.Redirect("msgboard.asp")
%>