%option explicit%> <% ShopCheckAdmin "shopa_editdisplay.asp" '******************************* ' Version 5.00 ' Display fields in one record of one table ' setting field to keyword "NULL" sets field to empty ' Feb 25, 2003 '******************************* dim Addaction,Updateaction, Deleteaction dim rstemp dim which dim idfield dim dbtable, conn dim shipmethodid, shipmethod, smprice, shipbasecost, shipextracost dim shipother1, shipother2, shipcost1, shipcost2, shiproutine, shipcountry Addaction=Request.form("add") Updateaction=Request.form("update") Deleteaction=request("delete") GetInputValues If DeleteAction<>"" then DeleteRecord end if sError="" EditOpenDatabase conn, database,dbtable If Addaction = "" and Updateaction = "" Then AdminPageHeader GenerateForm AdminPageTrailer Else AdminPageHeader UpdateRecord GenerateForm AdminPageTrailer end if Shopclosedatabase conn '************************ Sub GetInputValues ' ID, allows editing a record which=request.querystring("which") idfield=request.querystring("idfield") dbtable= request.querystring("table") database=request.querystring("database") If idfield="" then idfield="shipmethodid" dbtable="shipmethods" end if ValidateTable End Sub ' Sub ValidateTable '******************************************** 'See if user has access to this table Dim UserTables, i dim tablecount if getconfig("XRestrictAdminTables")<>"Yes" then exit sub UserTables=GetSess("UserTables") If Isnull(UserTables) then exit sub end if if UserTables="" then exit Sub else UserTables=split(GetSess("UserTables"),",",-1,1) end if tablecount=ubound(UserTables) for i = 0 to tablecount if ucase(dbtable)=ucase(Usertables(i)) then exit sub end if next dbtable="" end sub Sub GenerateForm dim sqltemp if which <> "" then sqltemp="select * from " & dbtable sqltemp=sqltemp & " where " & idfield & "=" & which 'Debugwrite sqltemp set rstemp=conn.execute(sqltemp) end if DisplayForm if which <> "" then rstemp.close set rstemp=nothing end if end Sub '**************************** Sub DisplayForm() if which <> "" then shipmethodid=rstemp("shipmethodid") shipmethod=rstemp("shipmethod") smprice=rstemp("smprice") shipbasecost=rstemp("shipbasecost") shipextracost=rstemp("shipextracost") shipother1=rstemp("shipother1") shipother2=rstemp("shipother2") shipcost1=rstemp("shipcost1") shipcost2=rstemp("shipcost2") shiproutine=rstemp("shiproutine") shipcountry=rstemp("shipcountry") end if response.write "
") end sub '************ ' Sub UpdateRecord dim sqltemp if getconfig("xMYSQL")="Yes" then MYSQLProcessrecord updateaction, conn, dbtable, idfield, which exit sub end if If updateaction<>"" then sqltemp="select * from " & dbtable sqltemp= sqltemp & " where " & idfield & "=" & which Set rstemp = Server.CreateObject("ADODB.Recordset") rstemp.open sqltemp, conn, 1, 3 rstemp.Update else Set rstemp = Server.CreateObject("ADODB.Recordset") rstemp.open dbtable, conn, adOpenKeyset, adLockOptimistic rstemp.AddNew end if GenerateUpdateSQL which = rstemp(idfield) rstemp.close set rstemp=nothing sError= sError & getlang("LangEdit03") & "