%option explicit%> <% ShopCheckAdmin "shopa_editshipping.asp" '******************************* ' Version 6.50 ' Display fields in one record of one table ' setting field to keyword "NULL" sets field to empty ' March 8, 2004 '******************************* dim Addaction,Updateaction, Deleteaction dim rstemp dim which dim idfield dim dbtable, conn dim shipmethodid, shipmethod, smprice, shipbasecost, shipextracost dim shipother1, shipother2, shipcost1, shipcost2, shiproutine, shipcountry dim shippingcalc if request("other") = "yes" then shippingcalc = "other" setsess "shippingcalc", shippingcalc else shippingcalc = lcase(getconfig("xshippingcalc")) setsess "shippingcalc", shippingcalc end if Addaction=Request.form("add") Updateaction=Request.form("update") Deleteaction=request("delete") GetInputValues If DeleteAction<>"" then DeleteRecord end if sError="" EditOpenDatabase conn, database,dbtable If Addaction = "" and Updateaction = "" Then AdminPageHeader GenerateForm AdminPageTrailer Else sError="" ValidateShipMethod ' need to validate anything, nothing is required if sError = "" Then AdminPageHeader UpdateRecord GenerateForm AdminPageTrailer else AdminPageHeader GenerateForm AdminPageTrailer end if end if Shopclosedatabase conn '************************ Sub GetInputValues ' ID, allows editing a record which=request.querystring("which") 'VP-ASP 6.09 - Precautionary Security Fix if which > "" then If not isnumeric(which) then shoperror "ID must be numeric" end if end if database=request.querystring("database") idfield="shipmethodid" dbtable="shipmethods" ValidateTable End Sub ' Sub ValidateTable '******************************************** 'See if user has access to this table Dim UserTables, i dim tablecount if getconfig("XRestrictAdminTables")<>"Yes" then exit sub UserTables=GetSess("UserTables") If Isnull(UserTables) then exit sub end if if UserTables="" then exit Sub else UserTables=split(GetSess("UserTables"),",",-1,1) end if tablecount=ubound(UserTables) for i = 0 to tablecount if ucase(dbtable)=ucase(Usertables(i)) then exit sub end if next dbtable="" end sub Sub GenerateForm dim sqltemp if which <> "" then sqltemp="select * from " & dbtable sqltemp=sqltemp & " where " & idfield & "=" & which 'Debugwrite sqltemp set rstemp=conn.execute(sqltemp) end if if sError<> "" then shopwriteError SError Serror="" end if DisplayForm gethelp(getsess("shippingcalc")) if which <> "" then rstemp.close set rstemp=nothing end if end Sub '**************************** Sub DisplayForm() 'VP-ASP 6.50 - should always call this SetUpRowsCalc dim thing, methodrows methodrows = getsess("methodrows") if which <> "" then shipmethodid=rstemp("shipmethodid") shipmethod=rstemp("shipmethod") smprice=rstemp("smprice") shipbasecost=rstemp("shipbasecost") shipextracost=rstemp("shipextracost") shipother1=rstemp("shipother1") shipother2=rstemp("shipother2") shipcost1=rstemp("shipcost1") shipcost2=rstemp("shipcost2") shiproutine=rstemp("shiproutine") shipcountry=rstemp("shipcountry") else 'VP-ASP 6.50 - called earlier in sub ' SetUpRowsCalc ' dim thing, methodrows ' methodrows = getsess("methodrows") if methodrows > "" then methodrows = split(methodrows,",") for each thing in methodrows if request(left(thing, instr(thing, "-") - 1)) > "" then select case left(thing, instr(thing, "-") - 1) case "shipmethod" shipmethod = request("shipmethod") case "shiproutine" shiproutine = request("shiproutine") end select End If next else exit sub end if end if dim otherparams if request.querystring("other") = "yes" then otherparams = "&other=yes" else otherparams = "" end if %>