<%option explicit%>
<%
ShopCheckAdmin ""
'*******************************
' Version 6.50 Updates Mycompany table
' Display fields in one record of one table
' setting field to keyword "NULL" sets field to empty
' March 8, 2004
'*******************************
dim Addaction,Updateaction, Deleteaction
dim rstemp
dim which
dim idfield
dim dbtable, conn
dim setupid,companyname,address,city,state,postalcode,country
dim phonenumber,faxnumber,defaultpaymentterms,defaultinvoicedescription
dim salestaxrate,myemail,other1,other2,other3,other4
Addaction=Request.form("add")
Updateaction=Request.form("update")
sError=""
Deleteaction=request("delete")
GetInputValues
If DeleteAction<>"" then
DeleteRecord
end if
if dbtable = "" then
shoperror getlang("langeditselectfail")
end if
EditOpenDatabase conn, database,dbtable
If Addaction = "" and Updateaction = "" Then
AdminPageHeader
SetDefaultvalues
GenerateForm
AdminPageTrailer
Else
AdminPageHeader
UpdateRecord
GenerateForm
AdminPageTrailer
end if
Shopclosedatabase conn
'************************
Sub GetInputValues
' ID, allows editing a record
which=request.querystring("which")
'VP-ASP 6.09 - Precautionary Security Fix
if which > "" then
If not isnumeric(which) then
shoperror "ID must be numeric"
end if
end if
idfield=request.querystring("idfield")
dbtable= request.querystring("table")
database=request.querystring("database")
If dbtable="" then dbtable="mycompany"
If idfield="" then idfield="setupid"
ValidateTable
End Sub
'
Sub ValidateTable
'********************************************
'See if user has access to this table
Dim UserTables, i
dim tablecount
if getconfig("XRestrictAdminTables")<>"Yes" then exit sub
UserTables=GetSess("UserTables")
If Isnull(UserTables) then
exit sub
end if
if UserTables="" then
exit Sub
else
UserTables=split(GetSess("UserTables"),",",-1,1)
end if
tablecount=ubound(UserTables)
for i = 0 to tablecount
if ucase(dbtable)=ucase(Usertables(i)) then
exit sub
end if
next
dbtable=""
end sub
'*******************************************************************************
' Get the specific record and then generate form based on this record
'*******************************************************************************
Sub GenerateForm
dim sqltemp
if which <> "" then
sqltemp="select * from " & dbtable
sqltemp=sqltemp & " where " & idfield & "=" & which
set rstemp=conn.execute(sqltemp)
end if
DisplayForm
if which <> "" then
rstemp.close
set rstemp=nothing
end if
end Sub
'****************************
Sub DisplayForm()
if which <> "" then
setupid=rstemp("setupid")
companyname=rstemp("companyname")
address=rstemp("address")
city=rstemp("city")
state=rstemp("state")
postalcode=rstemp("postalcode")
country=rstemp("country")
phonenumber=rstemp("phonenumber")
faxnumber=rstemp("faxnumber")
myemail=rstemp("myemail")
other1=rstemp("other1")
other2=rstemp("other2")
other3=rstemp("other3")
other4=rstemp("other4")
end if
%>
