<%@ LANGUAGE="VBSCRIPT" %>
<%
DbPath = SERVER.MapPath("../database/topboy-2002.mdb")
Set conn = Server.CreateObject("ADODB.Connection")
conn.open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DbPath
%>
<%
result=Instr(1,request.ServerVariables("http_referer"),request.servervariables("http_host"),1)
if result = 0 or result = null then
response.redirect "manager-login.asp"
end if
if session("sid") <> "top" then
response.redirect "manager-login.asp"
end if
groupname = request("orderid")
set rsu=server.createobject("adodb.recordset")
sql="select * from topboy_orderlist where orderid = '"& groupname &"' order by id desc"
'response.write sql
'response.end
rsu.open sql,conn,adOpenkeyset,adlockoptimistic,adcmdtext
set rs=server.createobject("adodb.recordset")
sql="select * from topboy_orderproduct where orderid = '"& groupname &"'"
'response.write sql
'response.end
rs.open sql,conn,adOpenkeyset,adlockoptimistic,adcmdtext
%>
<%=rsu("uname")%>
<% =rs("productname") %>