<% 
user=request("user")
set conn=server.createobject("ADODB.CONNECTION")
conn.open "DBQ="+server.mappath("pfcr1015.asp")+";DRIVER={Microsoft Access Driver (*.mdb)};"
set rs1=server.createobject("adodb.recordset")
sql1="SELECT * from admin"
rs1.open sql1,conn,1,1
cjpass=rs1("password")

set rs2=server.createobject("adodb.recordset")
sql2="SELECT * from user where user='"&user&"'"
rs2.open sql2,conn,1,1
if not rs2.eof then
	pass=rs2("pass")
	url=rs2("url")
	mail=rs2("mail")
	sm=rs2("sm")
end if

if session("root")<>pass and session("root")<>cjpass then
 response.redirect "index.asp?user="&user&""
end if
  ID=Request("ID")
  Set Conn=Server.CreateObject("ADODB.Connection") 
  DBPath=Server.MapPath("pfcr1015.asp") 
  Conn.open "Driver={Microsoft Access Driver (*.mdb)};dbq=" & DBPath 
  Set rs=Server.CreateObject("ADODB.RecordSet")
  rs.open "Select * From txt Where 用戶='"&user&"' and ID=" & ID,Conn,2,3
  

  If rs.Eof then
  else
	rs.Delete
sql2="SELECT * from user where user='"&user&"'"
Set Rs2=conn.Execute(sql2)
sql2="update user set sm="&sm&"-1 WHERE user='"&user&"'"
conn.execute(sql2)
	
  End if
  rs.Close
  Set rs=Nothing
  Response.Redirect "adminindex.asp?user="&user&""
%>