<link href="style.css" type="text/css" rel="stylesheet">
<!--#include file="conn.asp"-->
<%
dim uid,bid
bid=request("id")
uid=request("userid")
if uid="" then
response.write "<script>alert('session已經過期，請重新登陸');window.location.href='login.asp'</script>"
else
'判斷是否借過
aa="select * from loans where  uid="&uid&" and bid="&bid
set xgw=server.CreateObject("adodb.recordset")
xgw.open aa,db,1,3
if not xgw.eof then 
response.write "<script>alert('這本書你已經借過了咯');window.location.href='book.asp?query=all_book'</script>"
else
sq="select * from u where id="&uid
set qq=db.execute(sq)
if qq("loan_num")<="8" then
'插入數據向loans
set rs=server.CreateObject("adodb.recordset")
sql="select * from loans"
rs.open sql,db,1,3
rs.addnew
rs("uid")=uid
rs("bid")=bid
rs("time")=date()
rs("loan_")=1
rs.update
'sql="insert into table loans ([uid],[bid],[time])values('"&uid&"','"&r_id&"','"&date&"')"
'db.execute(sql)
'更新book表
sql1="update book set [num]=[num]-1 where id="&bid
db.execute(sql1)
'update table u
sql2="update u set [loan_num]=[loan_num]+1 where id="&uid
db.execute(sql2)
response.write "<script>alert('借書成功');window.location.href='my_borrow.asp?id="&uid&"'</script>"
else
response.write "<script>alert('沒有借書余額咯');history.go(-1)</script>"
end if
end if
end if
%>