<!-- #include file=inc/md5.asp -->
<%
bj=replace(request("bj"),"'","")
xh=replace(request("xh"),"'","")
xhf=replace(request("xhf"),"'","")
xm=replace(request("xm"),"'","")
if xm="" then xm=replace(request.form("user"),"'","")
xq=replace(request("xq"),"'","")
mm=replace(request("mm"),"'","")
kc=replace(request("kc"),"'","")
lx=replace(request("lx"),"'","")
question=replace(request.form("question"),"'","")
answer=replace(request.form("answer"),"'","")
if mm="" then 
mm=xh
end if
sex=replace(request("sex"),"'","")
addr=replace(request("addr"),"'","")
yb=replace(request("yb"),"'","")
username=replace(request("username"),"'","")
password=replace(request("password"),"'","")
if password="" then
password=username
end if
%>

<!-- #include file="inc/conn.asp"-->

<%if request("kind")="1" then%>
<%
if xh="" or bj="--==請選擇==--" then
    response.write "<script language=JavaScript>" & chr(13) & "alert('請您輸入工號和其他資料');" & "history.back()" & "</script>" 
    Response.End
end if
mm1=replace(request("mm1"),"'","")
if session("password")<>"" then mm1=mm
if mm<>mm1 then
    response.write "<script language=JavaScript>" & chr(13) & "alert('密碼前后不一致！');" & "history.back()" & "</script>"
    Response.End
end if
mysql="select xh from user where xh='"&xh&"'"
set rs1=conn.execute(mysql)
if not rs1.eof then
  rs1.close
  response.write "<script language=JavaScript>" & chr(13) & "alert('你輸入的工號已經存在！~');" & "history.back()" & "</script>"
  response.End
end if


set savebbs1=conn.execute("insert into user(bj,xh,xm,mm,sex,question,answer,addr,yb)values('"&bj&"','"&xh&"','"&xm&"','"&mm&"','"&sex&"','"&question&"','"&answer&"','"&addr&"','"&yb&"')")
session("user")=xh
session("pwd")=mm
response.write "<script language=JavaScript>" & chr(13) & "alert('信息添加成功！');"&"window.location.href = '"&session("return")&"'"&" </script>"
set savebbs1=nothing 
end if
%>

<%if request("kind")="0" then%>
<%if session("password")<>"" then%>
<%
if username="" then
    response.write "<script language=JavaScript>" & chr(13) & "alert('請您輸入管理員的相關信息');" & "history.back()" & "</script>" 
    Response.End
end if

mysql="select username from admin where username='"&username&"'"
set rs1=conn.execute(mysql)
if not rs1.eof then
  rs1.close
  response.write "<script language=JavaScript>" & chr(13) & "alert('您輸入的用戶已經存在！~');" & "history.back()" & "</script>"
  response.End
end if


set savebbs1=conn.execute("insert into admin(username,password) values('"&username&"','"&md5(password,16)&"')")
response.write "<script language=JavaScript>" & chr(13) & "alert('管理員信息添加成功！');"&"window.location.href = 'admin_add.asp?kind=admin'"&" </script>"
set savebbs1=nothing 
%>

<%
else
response.redirect("admpost.asp")
end if
end if
%>


<%if request("kind")="2" then%>
<%if session("password")<>"" then%>
<%
if bj="" or xhf="" then
    response.write "<script language=JavaScript>" & chr(13) & "alert('請您輸入完整的信息');" & "history.back()" & "</script>"
    Response.End
end if

mysql="select bj from bjb where bj='"&bj&"'"
set rs1=conn.execute(mysql)
if not rs1.eof then
  rs1.close
  response.write "<script language=JavaScript>" & chr(13) & "alert('您輸入的信息已經存在！~');" & "history.back()" & "</script>"
  response.End
end if


set savebbs1=conn.execute("insert into bjb(bj,xhf) values('"&bj&"','"&xhf&"')")
response.write "<script language=JavaScript>" & chr(13) & "alert('相關信息添加成功！');"&"window.location.href = '"&session("return")&"'"&" </script>"
set savebbs1=nothing 
%>

<%
else
response.redirect("admpost.asp")
end if
end if
%>


<%if request("kind")="3" then%>
<%if session("password")<>"" then%>
<%
if kc="" or bj="--==請選擇==--" then
    response.write "<script language=JavaScript>" & chr(13) & "alert('請您輸入完整信息');" & "history.back()" & "</script>"
    Response.End
end if

bjj=left(bj,3)
for t=4 to len(bj)
if mid(bj,t,1)>="0" and mid(bj,t,1)<="9" then exit for
bjj=bjj&mid(bj,t,1)
next
mysql="select * from kcb where bj='"&bjj&"' and kc='"&kc&"' and lx='"&lx&"' and xq='"&xq&"'"
set rs1=conn.execute(mysql)
if not rs1.eof then
  rs1.close
  response.write "<script language=JavaScript>" & chr(13) & "alert('您輸入的信息已經存在！~');" & "history.back()" & "</script>"
  response.End
end if


set savebbs1=conn.execute("insert into kcb(bj,kc,xq,lx) values('"&bjj&"','"&kc&"','"&xq&"','"&lx&"')")
response.write "<script language=JavaScript>" & chr(13) & "alert('相關工作信息添加成功！');"&"window.location.href = 'admin_add.asp?kind=kc'"&" </script>"
set savebbs1=nothing 
%>

<%
else
response.redirect("admpost.asp")
end if
end if
%>