<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%> <% if session("admin")="" then conn.close set conn = nothing response.Write "" response.End end if %> <% dim action,categoryid categoryid=SafeRequest("id",1) action=FormatSQL(SafeRequest("action",0)) select case action case "add" set rs=server.CreateObject("adodb.recordset") rs.open "select * from category2",conn,1,3 rs.AddNew rs("category")=trim(request.form("category2")) rs("categoryorder")=int(request.form("categoryorder2")) rs("flag")=request("flag") rs("model")=request("model") rs.Update rs.Close set rs=nothing response.Redirect "ProductClass.asp" case "edit" set rs=server.CreateObject("adodb.recordset") rs.open "select * from category2 where categoryid="&categoryid,conn,1,3 rs("category")=trim(request.form("category")) rs("categoryorder")=int(request.form("categoryorder")) rs("flag")=request("flag2") rs("model")=request("model") rs.Update rs.Close set rs=nothing response.Redirect "ProductClass.asp" case "del" conn.execute ("delete from category2 where categoryid="&categoryid) conn.execute ("delete from product2 where categoryid="&categoryid) response.Redirect "ProductClass.asp" end select %>