%@LANGUAGE="VBSCRIPT"%> <%Response.Buffer = true %> <%RedirURL = "/adverts/adverts.asp" If not (member or editor or master) then Response.Redirect(RedirURL)%> <% PageMode = Request("PageMode") If PageMode = "" Then PageMode = Request.Form("PageMode") If PageMode = "cancel changes" or PageMode = "abandon new record" Then Response.Redirect(RedirURL) If PageMode = "AddNew" Then mTextcontent = "" m_ID = 0 'dummy value savlabel = "save new record" canlabel = "abandon new record" editing = false titlesuffix = "(adding a new record)" Else savlabel = "save changes" canlabel = "cancel changes" editing = true titlesuffix = "(editing record)" End If If PageMode = "Edit" Then OpenOleConn(datadir+"npc_adverts.mdb") set rs = objConn.execute("SELECT * from tblAdverts where ID = " & Request("ID")) mtextcontent = rs.Fields("textcontent") m_ID = rs.Fields("ID") CloseData() End If If PageMode = "delete record" Then OpenOleConn(datadir+"npc_adverts.mdb") set rs = Server.CreateObject("ADODB.Recordset") SQL = "DELETE * from tblAdverts WHERE ID = " & Request.form("ID") & " " rs.Open SQL, objConn CloseData() Response.Redirect(RedirURL) End If If PageMode = "save changes" or PageMode = "save new record" Then if member or editor or master then ' stop parameter hacking OpenOleConn(datadir+"npc_adverts.mdb") set rs = Server.CreateObject("ADODB.Recordset") If PageMode = "save changes" Then rs.Open "select * from tblAdverts where id=" & request.form("id"), objConn, 2, 3 else rs.Open "select * from tblAdverts", objConn, 2, 3 rs.addnew newrec = true end if rs("textcontent") = nz(Request.form("ftextcontent")) Author = false If gUserID = rs("authorID") then Author = true if newrec or author then rs("datestamp") = now() rs("author") = session("username") rs("authorID") = gUserID end if rs.update CloseData() Response.Redirect(RedirURL & "?pagemode=" & PageMode) End if End if %>
| Adverts (editing) |