<%@ LANGUAGE="VBSCRIPT" %>
<%
DbPath = SERVER.MapPath("../database/topboy-2002.mdb")
Set conn = Server.CreateObject("ADODB.Connection")
conn.open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DbPath
%>
<%
result=Instr(1,request.ServerVariables("http_referer"),request.servervariables("http_host"),1)
if result = 0 or result = null then
response.redirect "manager-login.asp"
end if
if session("sid") <> "top" then
response.redirect "manager-login.asp"
end if
set rs=server.createobject("adodb.recordset")
sqlp="select * from topboy_message where ccur(id) = '"&request("id")&"'"
rs.open sqlp,conn,adOpenkeyset,adlockoptimistic,adcmdtext
set rs1=server.createobject("adodb.recordset")
sqltext="select * from topboy_type"
rs1.open sqltext,conn,adOpenkeyset,adlockoptimistic,adcmdtext
if request("hf") = "y" then
insertnum=0
if rs.recordcount=0 then
numb = "1"
else
numb = cstr(rs.recordcount)+1
end if
vremark=replace(request("vremark"),vbcrlf," ")
vremark=replace(vremark,"'","’")
sqltext="update topboy_message set buy='"&request("buy")&"',show='"&request("show")&"',mtype='"&request("mtype")&"',title='"&request("title")&"',copy='"&request("copy")&"',price='"&request("price")&"',content='"& vremark &"' where ccur(id) = '"&request("pid")&"'"
conn.execute sqltext
response.redirect session("baseadd")
else
session("baseadd") = request.ServerVariables("http_referer")
%>