<%
if session("admin")="" then
conn.close
set conn = nothing
response.Write ""
response.End
end if
dim action,id
id=SafeRequest("id",1)
action=FormatSQL(SafeRequest("action",0))
select case action
case "add"
set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from product2",conn,1,3
rs.AddNew
rs("categoryid")=trim(request.form("categoryid"))
if trim(request.form("sortsid"))="" then
sortsid=0
else
sortsid=trim(request.form("sortsid"))
end if
rs("sortsid")=sortsid
rs("name")=trim(request.form("name"))
rs("model")=trim(request.form("model"))
rs("place")=trim(request.form("place"))
rs("price")=trim(request.form("price"))
rs("pic")=trim(request.form("PhotoUrl_Thumb"))
rs("intro")=trim(request.form("newscontent"))
rs("addtime")=now
if trim(request.form("flag"))="" then
rs("flag")=0
else
rs("flag")=trim(request.form("flag"))
end if
rs.Update
set rs1=conn.execute("select top 1 id,sortsid from product2 order by id desc")
if not rs1.eof then
set rs2=conn.execute("select model from sorts where sortsid="&rs1(1))
if not rs2.eof then
model=rs2(0)
end if
call HtmlHzContent(trim(model),rs(0)&"")
end if
response.Write ""
response.End'set rs=nothing
'conn.close
'set conn=nothing
case "edit"
dim mid
mid=request.Form("mid")
set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from product2 where id="&mid&"",conn,1,3
rs("categoryid")=trim(request.form("categoryid"))
if trim(request.form("sortsid"))="" then
sortsid=0
else
sortsid=trim(request.form("sortsid"))
end if
rs("sortsid")=sortsid
rs("name")=trim(request.form("name"))
rs("model")=trim(request.form("model"))
rs("place")=trim(request.form("place"))
rs("price")=trim(request.form("price"))
rs("pic")=trim(request.form("PhotoUrl_Thumb"))
rs("topid")=trim(request.form("topid"))
rs("intro")=trim(request.form("newscontent"))
rs("addtime")=now
if trim(request.form("flag"))="" then
rs("flag")=0
else
rs("flag")=trim(request.form("flag"))
end if
rs.Update
set rs2=conn.execute("select model from sorts where sortsid="&sortsid)
if not rs2.eof then
model=rs2(0)
end if
call HtmlHzContent(trim(model),rs(0)&"")
conn.close
set conn=nothing
response.Write ""
response.End
case request("action")
mid=request("id")
set rs=server.CreateObject("adodb.recordset")
rs.Open "select flag from product2 where id="&mid&"",conn,1,3
rs("flag")=request("flag")
rs.Update
rs.Close
set rs=nothing
conn.close
set conn=nothing
response.Write ""
response.End
end select
%>
<%rs.close
conn.close
%>