<%@ LANGUAGE="VBSCRIPT" %>
<%
DbPath = SERVER.MapPath("../database/topboy-2002.mdb")
Set conn = Server.CreateObject("ADODB.Connection")
conn.open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DbPath
%>
<%
result=Instr(1,request.ServerVariables("http_referer"),request.servervariables("http_host"),1)
if result = 0 or result = null then
response.redirect "manager-login.asp"
end if
if session("sid") <> "top" then
response.redirect "manager-login.asp"
end if
if request("b2") = "无效定单" then
sql="delete from topboy_orderlist WHERE orderid = '"& Request("orderid") &"'"
'response.write sql
'response.end
conn.Execute(sql)
sql="delete from topboy_orderproduct WHERE orderid = '"& Request("orderid") &"'"
conn.Execute(sql)
response.redirect "manager-order-list.asp"
response.end
end if
if request("b1") = "有效定单" then
sqlu="update topboy_orderlist set staus='y' WHERE orderid = '"& Request("orderid") &"'"
conn.execute sqlu
response.redirect "manager-order-list.asp"
response.end
end if
groupname = request("orderid")
set rsu=server.createobject("adodb.recordset")
sql="select * from topboy_orderlist where orderid = '"& groupname &"' order by id desc"
'response.write sql
'response.end
rsu.open sql,conn,adOpenkeyset,adlockoptimistic,adcmdtext
set rs=server.createobject("adodb.recordset")
sql="select * from topboy_orderproduct where orderid = '"& groupname &"'"
'response.write sql
'response.end
rs.open sql,conn,adOpenkeyset,adlockoptimistic,adcmdtext
%>
