<%@LANGUAGE="VBScript" CODEPAGE="936"%>
<!--#include file="conn.asp" -->
<!--#include file="CHAR.asp" -->
<%
id=request.QueryString("id")
If id="" or IsNumeric(id)=False then
	response.Redirect("error.asp")
end if
strsql="select CommentUser from comment where CommentID="&id
set rs=conn.execute(strsql)
if rs("CommentUser")=session("username") or session("usergroup")=3 then
	strsql="delete from comment where CommentID="&id
	conn.execute(strsql)
else
	response.Redirect("error.asp")
end if
rs.close
set rs=nothing
CloseDatabase
response.redirect("photoview.asp?id="&request("pid"))
%>