%@LANGUAGE="VBSCRIPT"%> <% If Session("cAdminUserName") = "" Then Response.Redirect "AdminLogin.asp" End If %> <% ' *** Update Record: construct a sql update statement and execute it MM_editAction = CStr(Request("URL")) If (Request.QueryString <> "") Then MM_editAction = MM_editAction & "?" & Request.QueryString End If If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then MM_tableName = "tblAds" MM_tableCol = "nAdID" MM_recordId = "" + Request.Form("MM_recordId") + "" MM_fields = "cNetAddress,cNetAddress,',none,'',txtTitle,cTitle,',none,'',txtShortDescription,cShortDescription,',none,'',txtDescription,cDescription,',none,'',sltCategory,cCategory,',none,'',selectSubCategory,cSubCategory,',none,'',Country,cCountry,',none,'',City,cCity,',none,'',txtContact,cContact,',none,'',dExpired,dExpiryDate,none,none,NULL" MM_redirectPage = "admincom.asp?view=Ads&sort=nUserID&SortOrder=ASC" ' create the sql update statement MM_updateStr = "update " & MM_tableName & " set " MM_fieldsArray = Split(MM_fields, ",") For i = LBound(MM_fieldsArray) To UBound(MM_fieldsArray) Step 5 FormVal = CStr(Request.Form(MM_fieldsArray(i))) Delim = MM_fieldsArray(i+2) If (Delim = "none") Then Delim = "" AltVal = MM_fieldsArray(i+3) If (AltVal = "none") Then AltVal = "" EmptyVal = MM_fieldsArray(i+4) If (EmptyVal = "none") Then EmptyVal = "" If (FormVal = "") Then FormVal = EmptyVal Else If (AltVal <> "") Then FormVal = AltVal ElseIf (Delim = "'") Then ' escape quotes FormVal = "'" & Replace(FormVal,"'","''") & "'" Else FormVal = Delim + FormVal + Delim End If End If If (i <> LBound(MM_fieldsArray)) Then MM_updateStr = MM_updateStr & "," End If MM_updateStr = MM_updateStr & MM_fieldsArray(i+1) & " = " & FormVal Next MM_updateStr = MM_updateStr & " where " & MM_tableCol & " = " & MM_recordId ' finish the sql and execute it Set MM_updateCmd = Server.CreateObject("ADODB.Command") MM_updateCmd.ActiveConnection = strConn MM_updateCmd.CommandText = MM_updateStr MM_updateCmd.Execute ' redirect with URL parameters If (MM_redirectPage = "") Then MM_redirectPage = CStr(Request("URL")) End If If (InStr(1, MM_redirectPage, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then MM_redirectPage = MM_redirectPage End If Call Response.Redirect(MM_redirectPage) End If %> <% Dim rsUpdateAds__MMColParam rsUpdateAds__MMColParam = "0" if(Request.QueryString("nAdID") <> "") then rsUpdateAds__MMColParam = Request.QueryString("nAdID") %> <% set rsUpdateAds = Server.CreateObject("ADODB.Recordset") rsUpdateAds.ActiveConnection = strConn rsUpdateAds.Source = "SELECT * FROM tblAds WHERE nAdID = " + Replace(rsUpdateAds__MMColParam, "'", "''") + "" rsUpdateAds.CursorType = 0 rsUpdateAds.CursorLocation = 2 rsUpdateAds.LockType = 3 rsUpdateAds.Open rsUpdateAds_numRows = 0 %>
<% rsUpdateAds.Close set rsUpdateAds = Nothing %>