<%@ page language="java" import="java.util.*" pageEncoding="GB18030"%>
<%@ page import='java.sql.*'%>
<%@include file="..\\function\\admin_check.jsp" %>
<jsp:useBean id='oMD5' scope='request' class='beartool.MD5'/>
<%String action=request.getParameter("action");%>
<%
///////////////////////////對文章部分的操作///////////////////////////////
if(action.equals("article_add"))//////////文章添加//////////
{
	String article_class_id,article_title,article_content;
	
	article_class_id=request.getParameter("article_class_id");	
	article_title=request.getParameter("article_title");
	article_title=new String(article_title.getBytes("ISO-8859-1"));
	article_content=request.getParameter("article_content").trim();
	article_content=new String(article_content.getBytes("ISO-8859-1"));
	
	
	if(article_content.equals(""))
	{		
		out.print("<script language=javascript>alert('文章內容不能為空!');javascript:history.go(-1);</script>");

	}else
	{
		Statement stmt1=conn.createStatement();
		String sql1="insert into tb_blog_article(article_class_id,article_title,article_content)";
				sql1=sql1+" values ('"+article_class_id+"','"+article_title+"','"+article_content+"')";
		
		int flag=stmt1.executeUpdate(sql1);
		if(flag>0)
		{
			stmt1.close();
			conn.close();
			out.print("添加成功! <br /><a href='article_add.jsp'>繼續添加?</a>  &nbsp; <a href='article_modify.jsp'> 返回? </a>");
		}
	}
}

if(action.equals("article_edit"))//////////文章修改//////////
{	
	int article_id=java.lang.Integer.parseInt(request.getParameter("article_id"));
	String article_class_id,article_title,article_content;
	
	article_class_id=request.getParameter("article_class_id");	
	article_title=request.getParameter("article_title");
	article_title=new String(article_title.getBytes("ISO-8859-1"));
	article_content=request.getParameter("article_content").trim();
	article_content=new String(article_content.getBytes("ISO-8859-1"));
	
	
	if(article_content.equals(""))
	{		
		out.print("<script language=javascript>alert('文章內容不能為空!');javascript:history.go(-1);</script>");

	}else
	{
		Statement stmt1=conn.createStatement();
		String sql1="update tb_blog_article set article_class_id='"+article_class_id+"',article_title='"+article_title+"',article_content='"+article_content+"'";
			   sql1=sql1+"where article_id="+article_id;
		int flag=stmt1.executeUpdate(sql1);
		if(flag>0)
		{
			stmt1.close();
			conn.close();
			out.print("<center>編輯成功!</center><meta http-equiv=refresh content='1; url=article_modify.jsp'>");
		}
	}
}

if(action.equals("article_del"))//////////文章刪除//////////
{
	int article_id=java.lang.Integer.parseInt(request.getParameter("article_id"));
	Statement stmt1=conn.createStatement();
	String sql1="delete from tb_blog_article where article_id="+article_id;
	Statement stmt2=conn.createStatement();
	String sql2="delete from tb_blog_comment where comm_article_id="+article_id;
	stmt2.executeUpdate(sql2);
	stmt1.executeUpdate(sql1);
	stmt2.close();
	stmt1.close();
	out.print("<center>刪除成功!</center><meta http-equiv=refresh content='1; url=article_modify.jsp'>");
	//response.sendRedirect("../default.jsp");
}

/////////////////////////對分類的操作部分//////////////////////////
if(action.equals("class_add"))//////////分類添加//////////
{
	String class_name=request.getParameter("class_add");
	class_name=new String(class_name.getBytes("ISO-8859-1"));
	
	Statement stmt1=conn.createStatement();
	String sql1="insert into tb_blog_article_class(class_name) values ('"+class_name+"')";
	stmt1.executeUpdate(sql1);
	stmt1.close();
	conn.close();
	out.print("<center>添加成功!</center><meta http-equiv=refresh content='1; url=class_modify.jsp'>");
	
}

if(action.equals("class_del"))//////////分類刪除//////////
{
	int class_id=java.lang.Integer.parseInt(request.getParameter("class_id"));
	
	Statement stmt1=conn.createStatement();
	String sql1="delete from tb_blog_article_class where class_id="+class_id;
	stmt1.executeUpdate(sql1);
	stmt1.close();
	conn.close();
	out.print("<center>刪除成功!</center><meta http-equiv=refresh content='1; url=class_modify.jsp'>");
}

if(action.equals("class_rename"))//////////分類修改//////////
{
	int class_id=java.lang.Integer.parseInt(request.getParameter("class_id"));
	String class_name=request.getParameter("class_rename");
	class_name=new String(class_name.getBytes("ISO-8859-1"));
	
	Statement stmt1=conn.createStatement();
	String sql1="update tb_blog_article_class set class_name='"+class_name+"' where class_id="+class_id;
	stmt1.executeUpdate(sql1);
	stmt1.close();
	conn.close();
	out.print("<center>修改成功!</center><meta http-equiv=refresh content='1; url=class_modify.jsp'>");
}
//////////////////////////管理員修改密碼/////////////////////////////

if(action.equals("setpsw"))
{
	//String oldpsw=request.getParameter("oldpsw");
	String newpsw=request.getParameter("newpsw");
	String renewpsw=request.getParameter("renewpsw");
	
	if(!newpsw.equals(renewpsw))
	{
	out.print("<script language=javascript>alert('兩次輸入的密碼不一致!');javascript:history.go(-1);</script>");
	
	}else
	{
	String md5psw = oMD5.getMD5ofStr(newpsw);  //計算MD5的值
	
	
	Statement stmt1=conn.createStatement();
	String sql1="update tb_admin set admin_psw='"+md5psw+"'";
	int flag=stmt1.executeUpdate(sql1);
	if(flag>0)
	{
		out.print("<center>修改成功!</center><meta http-equiv=refresh content='1; url=admin_setpsw.jsp'>");
		stmt1.close();
		conn.close();
	}
	}
}



//////////////////////////管理員注銷/////////////////////////////
if(action.equals("logout"))
{
session.invalidate();
response.sendRedirect("default.jsp");
}
%>