<%@language=vbscript codepage=936 %> <% option explicit response.buffer=true Const PurviewLevel=1 'response.write "此功能被WEBBOY暂时禁止了！" 'response.end %> <% dim rs, sql, strPurview,iCount dim Action,FoundErr,ErrMsg Action=Trim(request("Action")) %> 管理员管理
管 理 员 管 理
管理导航： 管理员管理首页 | 新增管理员
<% if Action="Add" then call AddAdmin() elseif Action="SaveAdd" then call SaveAdd() elseif Action="ModifyPwd" then call ModifyPwd() elseif Action="ModifyPurview" then call ModifyPurview() elseif Action="SaveModifyPwd" then call SaveModifyPwd() elseif Action="SaveModifyPurview" then call SaveModifyPurview() elseif Action="Del" then call DelAdmin() else call main() end if if FoundErr=True then call WriteErrMsg() end if call CloseConn() sub main() Set rs=Server.CreateObject("Adodb.RecordSet") sql="select * from admin order by id" rs.Open sql,conn,1,1 iCount=rs.recordcount %>
<%do while not rs.EOF %> <% rs.MoveNext loop %>
选中 序号 用 户 名 权 限 最后登录IP 最后登录时间 登录次数 操 作
" <%if rs("UserName")=AdminName then response.write " disabled"%> onClick="unselectall()"> <%=rs("ID")%> <% if rs("username")=AdminName then response.write "" & rs("UserName") & "" else response.write rs("UserName") end if %> <% select case rs("purview") case 1 strPurview="超级管理员" case 2 strpurview="普通管理员" end select response.write(strPurview) %> <% if rs("LastLoginIP")<>"" then response.write rs("LastLoginIP") else response.write " " end if %> <% if rs("LastLoginTime")<>"" then response.write rs("LastLoginTime") else response.write " " end if %> <% if rs("LoginTimes")<>"" then response.write rs("LoginTimes") else response.write "0" end if %> <% response.write "修改密码  " response.write "修改权限  " if iCount>1 and rs("UserName")<>AdminName then response.write "删除" else response.write "    " end if %>
选中本页显示的所有管理员
<% rs.Close set rs=Nothing end sub sub AddAdmin() %>
新 增 管 理 员
用 户 名：  
初始密码：
确认密码：
权限设置：
超级管理员： 拥有所有权限。某些权限（如管理员管理、网站信息配置、网站选项配置等管理权限）只有超级管理员才有
普通管理员： 需要详细指定每一项管理权限
 
<% end sub sub ModifyPwd() dim UserID UserID=trim(Request("ID")) if UserID="" then FoundErr=True ErrMsg=ErrMsg & "
  • 请指定要修改的管理员ID
    • " exit sub else UserID=Clng(UserID) end if sql="Select * from Admin where ID=" & UserID Set rs=Server.CreateObject("Adodb.RecordSet") rs.Open sql,conn,1,3 if rs.Bof and rs.EOF then FoundErr=True ErrMsg=ErrMsg & "
  • 不存在此用户！
    • " else %>
    修 改 管 理 员 密 码
    用 户 名： <%=rs("UserName")%> ">
    新 密 码：
    确认密码：
     
    <% end if rs.close set rs=nothing end sub sub ModifyPurview() dim UserID UserID=trim(Request("ID")) if UserID="" then FoundErr=True ErrMsg=ErrMsg & "
  • 请指定要修改的管理员ID
    • " exit sub else UserID=Clng(UserID) end if sql="Select * from Admin where ID=" & UserID Set rs=Server.CreateObject("Adodb.RecordSet") rs.Open sql,conn,1,3 if rs.Bof and rs.EOF then FoundErr=True ErrMsg=ErrMsg & "
  • 不存在此用户！
    • " else %>
    修 改 管 理 员 权 限
    用 户 名： <%=rs("UserName")%> ">
    权限设置：
    > 超级管理员： 拥有所有权限。某些权限（如管理员管理、网站信息配置、网站选项配置等管理权限）只有超级管理员才有
    > 普通管理员： 需要详细指定每一项管理权限
    >
    管 理 员 权 限 详 细 设 置
    文章频道3 then response.write "style='display:none'"%>>
    onClick="table_Article.style.display='none';">频道管理员：拥有所有栏目的管理权限，并可以添加栏目和专题 onClick="table_Article.style.display='none';">栏目总编：拥有所有栏目的管理权限，但不能添加栏目和专题
    onClick="table_Article.style.display='';">栏目管理员：只拥有部分栏目管理权限，不能添加栏目和专题 onClick="table_Article.style.display='none';">在此频道里无任何管理权限
    注：栏目权限采用继承制度，即在某一栏目拥有某项管理权限，则在此栏目的所有子栏目中都拥有这项管理权限，并可在子栏目中指定更多的管理权限。
    下载频道 3 then response.write "style='display:none'"%>>
    onClick="table_Soft.style.display='none';"> 频道管理员：拥有所有栏目的管理权限，并可以添加栏目和专题 onClick="table_Soft.style.display='none';"> 栏目总编：拥有所有栏目的管理权限，但不能添加栏目和专题
    onClick="table_Soft.style.display='';"> 栏目管理员：只拥有部分栏目管理权限，不能添加栏目和专题 onClick="table_Soft.style.display='none';"> 在此频道里无任何管理权限
    注：栏目权限采用继承制度，即在某一栏目拥有某项管理权限，则在此栏目的所有子栏目中都拥有这项管理权限，并可在子栏目中指定更多的管理权限。
    图片频道 3 then response.write "style='display:none'"%>>
    onClick="table_Photo.style.display='none';"> 频道管理员：拥有所有栏目的管理权限，并可以添加栏目和专题 onClick="table_Photo.style.display='none';"> 栏目总编：拥有所有栏目的管理权限，但不能添加栏目和专题
    onClick="table_Photo.style.display='';"> 栏目管理员：只拥有部分栏目管理权限，不能添加栏目和专题 onClick="table_Photo.style.display='none';"> 在此频道里无任何管理权限
    注：栏目权限采用继承制度，即在某一栏目拥有某项管理权限，则在此栏目的所有子栏目中都拥有这项管理权限，并可在子栏目中指定更多的管理权限。
    网站管理权限
    > 修改自己密码 > 频道管理 > 表单管理 > 友情链接管理 > 上传文件管理 > 网站模板管理
    > 网站风格管理 > 广告管理 > 公告管理 > 注册用户管理 > 调查管理  > 统计管理
    > JS代码管理 > 邮件列表管理 disabled> 数据库管理      

    留言板
    > 回复留言 > 修改留言 > 删除留言 > 审核留言    
     
    <% end if rs.close set rs=nothing end sub %> <% sub SaveAdd() dim username, password,PwdConfirm, purview dim AdminPurview_Article,AdminPurview_Soft,AdminPurview_Photo,AdminPurview_Guest,AdminPurview_Others dim ClassInputer_Article,ClassChecker_Article,ClassMaster_Article dim ClassInputer_Soft,ClassChecker_Soft,ClassMaster_Soft dim ClassInputer_Photo,ClassChecker_Photo,ClassMaster_Photo username=trim(Request("username")) password=trim(Request("Password")) PwdConfirm=trim(request("PwdConfirm")) purview=trim(Request("purview")) AdminPurview_Article=Clng(trim(Request("AdminPurview_Article"))) AdminPurview_Soft=Clng(trim(Request("AdminPurview_Soft"))) AdminPurview_Photo=Clng(trim(Request("AdminPurview_Photo"))) AdminPurview_Guest=replace(replace(trim(request("AdminPurview_Guest"))," ",""),"'","") AdminPurview_Others=replace(replace(trim(request("AdminPurview_Others"))," ",""),"'","") ClassInputer_Article=replace(replace(trim(request("ClassInputer_Article"))," ",""),"'","") ClassChecker_Article=replace(replace(trim(request("ClassChecker_Article"))," ",""),"'","") ClassMaster_Article=replace(replace(trim(request("ClassMaster_Article"))," ",""),"'","") ClassInputer_Soft=replace(replace(trim(request("ClassInputer_Soft"))," ",""),"'","") ClassChecker_Soft=replace(replace(trim(request("ClassChecker_Soft"))," ",""),"'","") ClassMaster_Soft=replace(replace(trim(request("ClassMaster_Soft"))," ",""),"'","") ClassInputer_Photo=replace(replace(trim(request("ClassInputer_Photo"))," ",""),"'","") ClassChecker_Photo=replace(replace(trim(request("ClassChecker_Photo"))," ",""),"'","") ClassMaster_Photo=replace(replace(trim(request("ClassMaster_Photo"))," ",""),"'","") if AdminPurview_Guest<>"" then AdminPurview_Guest=AdminPurview_Guest & "," & "Manage" end if if username="" then FoundErr=True ErrMsg=ErrMsg & "
  • 用户名不能为空！
    • " end if if password="" then FoundErr=True ErrMsg=ErrMsg & "
  • 初始密码不能为空！
    • " end if if PwdConfirm<>Password then FoundErr=True ErrMsg=ErrMsg & "
  • 确认密码必须与初始密码相同！
    • " end if if purview="" then FoundErr=True ErrMsg=ErrMsg & "
  • 用户权限不能为空！
    • " else purview=CInt(purview) end if if FoundErr=True then exit sub end if sql="Select * from Admin where username='"&username&"'" Set rs=Server.CreateObject("Adodb.RecordSet") rs.Open sql,conn,1,3 if not (rs.bof and rs.EOF) then FoundErr=True ErrMsg=ErrMsg & "
  • 数据库中已经存在此管理员！
    • " rs.close set rs=nothing exit sub end if rs.addnew rs("username")=username rs("password")=md5(password) rs("purview")=purview if purview=1 then rs("AdminPurview_Article")=3 rs("AdminPurview_Soft")=3 rs("AdminPurview_Photo")=3 rs("AdminPurview_Guest")="" rs("AdminPurview_Others")="" else rs("AdminPurview_Article")=AdminPurview_Article rs("AdminPurview_Soft")=AdminPurview_Soft rs("AdminPurview_Photo")=AdminPurview_Photo rs("AdminPurview_Guest")=AdminPurview_Guest rs("AdminPurview_Others")=AdminPurview_Others end if rs.update rs.Close set rs=Nothing if AdminPurview_Article=3 then call AddClassMaster("ArticleClass","ClassInputer",UserName,ClassInputer_Article) call AddClassMaster("ArticleClass","ClassChecker",UserName,ClassChecker_Article) call AddClassMaster("ArticleClass","ClassMaster",UserName,ClassMaster_Article) end if if AdminPurview_Soft=3 then call AddClassMaster("SoftClass","ClassInputer",UserName,ClassInputer_Soft) call AddClassMaster("SoftClass","ClassChecker",UserName,ClassChecker_Soft) call AddClassMaster("SoftClass","ClassMaster",UserName,ClassMaster_Soft) end if if AdminPurview_Photo=3 then call AddClassMaster("PhotoClass","ClassInputer",UserName,ClassInputer_Photo) call AddClassMaster("PhotoClass","ClassChecker",UserName,ClassChecker_Photo) call AddClassMaster("PhotoClass","ClassMaster",UserName,ClassMaster_Photo) end if Call main() end sub sub SaveModifyPwd() dim UserID, UserName,password,PwdConfirm UserID=trim(Request("ID")) password=trim(Request("Password")) PwdConfirm=trim(request("PwdConfirm")) if UserID="" then FoundErr=True ErrMsg=ErrMsg & "
  • 请指定要修改的管理员ID
    • " else UserID=Clng(UserID) end if if password="" then FoundErr=True ErrMsg=ErrMsg & "
  • 新密码不能为空！
    • " end if if PwdConfirm<>Password then FoundErr=True ErrMsg=ErrMsg & "
  • 确认密码必须与新密码相同！
    • " end if if FoundErr=True then exit sub end if sql="Select * from Admin where ID=" & UserID Set rs=Server.CreateObject("Adodb.RecordSet") rs.Open sql,conn,1,3 if rs.Bof and rs.EOF then FoundErr=True ErrMsg=ErrMsg & "
  • 不存在此管理员！
    • " rs.close set rs=nothing exit sub end if rs("password")=md5(password) rs.update rs.Close set rs=Nothing call main() end sub sub SaveModifyPurview() dim UserID,UserName,Purview dim AdminPurview_Article,AdminPurview_Soft,AdminPurview_Photo,AdminPurview_Guest,AdminPurview_Others dim ClassInputer_Article,ClassChecker_Article,ClassMaster_Article dim ClassInputer_Soft,ClassChecker_Soft,ClassMaster_Soft dim ClassInputer_Photo,ClassChecker_Photo,ClassMaster_Photo dim OldAdminPurview_Article,OldAdminPurview_Soft,OldAdminPurview_Photo UserID=trim(Request("ID")) purview=trim(Request("purview")) AdminPurview_Article=Clng(trim(Request("AdminPurview_Article"))) AdminPurview_Soft=0'Clng(trim(Request("AdminPurview_Soft"))) AdminPurview_Photo=0'Clng(trim(Request("AdminPurview_Photo"))) AdminPurview_Guest=replace(replace(trim(request("AdminPurview_Guest"))," ",""),"'","") AdminPurview_Others=replace(replace(trim(request("AdminPurview_Others"))," ",""),"'","") ClassInputer_Article=replace(replace(trim(request("ClassInputer_Article"))," ",""),"'","") ClassChecker_Article=replace(replace(trim(request("ClassChecker_Article"))," ",""),"'","") ClassMaster_Article=replace(replace(trim(request("ClassMaster_Article"))," ",""),"'","") ClassInputer_Soft=replace(replace(trim(request("ClassInputer_Soft"))," ",""),"'","") ClassChecker_Soft=replace(replace(trim(request("ClassChecker_Soft"))," ",""),"'","") ClassMaster_Soft=replace(replace(trim(request("ClassMaster_Soft"))," ",""),"'","") ClassInputer_Photo=replace(replace(trim(request("ClassInputer_Photo"))," ",""),"'","") ClassChecker_Photo=replace(replace(trim(request("ClassChecker_Photo"))," ",""),"'","") ClassMaster_Photo=replace(replace(trim(request("ClassMaster_Photo"))," ",""),"'","") if AdminPurview_Guest<>"" then AdminPurview_Guest=AdminPurview_Guest & "," & "Manage" end if if UserID="" then FoundErr=True ErrMsg=ErrMsg & "
  • 请指定要修改的管理员ID
    • " else UserID=Clng(UserID) end if if purview="" then FoundErr=True ErrMsg=ErrMsg & "
  • 用户权限不能为空！
    • " else purview=CInt(purview) end if if FoundErr=True then exit sub end if sql="Select * from Admin where ID=" & UserID Set rs=Server.CreateObject("Adodb.RecordSet") rs.Open sql,conn,1,3 if rs.Bof and rs.EOF then FoundErr=True ErrMsg=ErrMsg & "
  • 不存在此管理员！
    • " rs.close set rs=nothing exit sub end if UserName=rs("UserName") OldAdminPurview_Article=rs("AdminPurview_Article") OldAdminPurview_Soft=rs("AdminPurview_Soft") OldAdminPurview_Photo=rs("AdminPurview_Photo") rs("purview")=purview if purview=1 then rs("AdminPurview_Article")=3 rs("AdminPurview_Soft")=3 rs("AdminPurview_Photo")=3 rs("AdminPurview_Guest")="" rs("AdminPurview_Others")="" else rs("AdminPurview_Article")=AdminPurview_Article rs("AdminPurview_Soft")=AdminPurview_Soft rs("AdminPurview_Photo")=AdminPurview_Photo rs("AdminPurview_Guest")=AdminPurview_Guest rs("AdminPurview_Others")=AdminPurview_Others end if rs.update rs.Close set rs=Nothing if OldAdminPurview_Article=3 then call RemoveClassMaster("ArticleClass",UserName) end if if OldAdminPurview_Soft=3 then call RemoveClassMaster("SoftClass",UserName) end if if OldAdminPurview_Photo=3 then call RemoveClassMaster("PhotoClass",UserName) end if if AdminPurview_Article=3 then call AddClassMaster("ArticleClass","ClassInputer",UserName,ClassInputer_Article) call AddClassMaster("ArticleClass","ClassChecker",UserName,ClassChecker_Article) call AddClassMaster("ArticleClass","ClassMaster",UserName,ClassMaster_Article) end if if AdminPurview_Soft=3 then call AddClassMaster("SoftClass","ClassInputer",UserName,ClassInputer_Soft) call AddClassMaster("SoftClass","ClassChecker",UserName,ClassChecker_Soft) call AddClassMaster("SoftClass","ClassMaster",UserName,ClassMaster_Soft) end if if AdminPurview_Photo=3 then call AddClassMaster("PhotoClass","ClassInputer",UserName,ClassInputer_Photo) call AddClassMaster("PhotoClass","ClassChecker",UserName,ClassChecker_Photo) call AddClassMaster("PhotoClass","ClassMaster",UserName,ClassMaster_Photo) end if call main() end sub sub DelAdmin() dim UserID UserID=trim(Request("ID")) if UserID="" then FoundErr=True ErrMsg=ErrMsg & "
  • 请指定要删除的管理员ID
    • " exit sub end if if instr(UserID,",")>0 then UserID=replace(UserID," ","") sql="Select * from Admin where ID in (" & UserID & ")" else UserID=clng(UserID) sql="select * from Admin where ID=" & UserID end if Set rs=Server.CreateObject("Adodb.RecordSet") rs.Open sql,conn,1,3 do while not rs.eof if rs("Purview")=2 then if rs("AdminPurview_Article")=3 then call RemoveClassMaster("ArticleClass",rs("UserName")) end if if rs("AdminPurview_Soft")=3 then call RemoveClassMaster("SoftClass",rs("UserName")) end if if rs("AdminPurview_Photo")=3 then call RemoveClassMaster("PhotoClass",rs("UserName")) end if end if rs.delete rs.update rs.movenext loop rs.close set rs=nothing call main() end sub sub AddClassMaster(SheetName,FieldName,strUserName,arrClassID) if isNull(arrClassID) or arrClassID="" then exit sub end if dim sqlMaster,rsMaster,ClassMaster sqlMaster="select ClassID," & FieldName & " from " & SheetName & " where ClassID in (" & arrClassID & ") order by RootID,OrderID" Set rsMaster=Server.CreateObject("Adodb.RecordSet") rsMaster.open sqlMaster,conn,1,3 do while not rsMaster.eof if isNull(rsMaster(1)) or rsMaster(1)="" then rsMaster(1)=strUserName else rsMaster(1)=rsMaster(1) & "|" & strUserName end if rsMaster.update rsMaster.movenext loop rsMaster.close set rsMaster=nothing end sub sub RemoveClassMaster(SheetName,strUserName) dim sqlMaster,rsMaster,ClassMaster,arrClassMaster,i sqlMaster="select ClassInputer,ClassChecker,ClassMaster from " & SheetName Set rsMaster=Server.CreateObject("Adodb.RecordSet") rsMaster.open sqlMaster,conn,1,3 do while not rsMaster.eof rsMaster(0)=RemoveStr(rsMaster(0),strUserName) rsMaster(1)=RemoveStr(rsMaster(1),strUserName) rsMaster(2)=RemoveStr(rsMaster(2),strUserName) rsMaster.update rsMaster.movenext loop rsMaster.close set rsMaster=nothing end sub function RemoveStr(str1,str2) if isnull(str1) or str1="" then RemoveStr="" exit function end if if str2="" then RemoveStr=str1 exit function end if if instr(str1,"|")>0 then dim arrStr,tempStr,i arrStr=split(str1,"|") for i=0 to ubound(arrStr) if arrStr(i)<>str2 then if tempStr="" then tempStr=arrStr(i) else tempStr=tempStr & "|" & arrStr(i) end if end if next RemoveStr=tempStr else if str1=str2 then RemoveStr="" else RemoveStr=str1 end if end if end function %>