<%
if session("login")<>"ok" then response.redirect("loginerror.html")
id = request.queryString("id")
function check(wert)
if len(wert)<1 then save = false
wert = replace(wert,"'", "`")
wert = replace(wert,chr(34), "``")
check = wert
end function
function check1(wert)
wert = replace(wert,",",".")
check1 = wert
if isNumeric(wert) = false then save = false
end function
set db = Server.CreateObject("ADODB.Connection")
connect="Driver={Microsoft Access Driver (*.mdb)}; DBQ="& server.mappath("../pw99_shop.mdb")
db.Open connect
sql = "select bezeichnung, beschreibung, bild, artikelnr, preis, rubrik from produkte where id = " & id
set rs = db.Execute(sql)
bezeichnung = rs("bezeichnung")
beschreibung = rs("beschreibung")
bild = rs("bild")
artikelnr = rs("artikelnr")
preis = rs("preis")
rubrik = rs("rubrik")
rs.close
set rs = nothing
Function show_search(parent1, ebene, selected)
if parent1 <> vbNullString then
for t = 0 to arrayLaenge
if rubriken(t,1) = parent1 then
platzhalter=""
for x= 0 to ebene
platzhalter = platzhalter & " "
next
if rubriken(t,2) = selected then
response.write(""&chr(13))
else
response.write(""&chr(13))
end if
parent2 = rubriken(t,2)
ebene1 = ebene +1
show_search parent2, ebene1, selected
end if
next
end if
end function
dim rubriken(100,4)
sql = "select rubrik, id, parent, rank from rubriken order by rank"
set rs = db.Execute(sql)
while not rs.eof
if i<100 then
rubriken(i,0) = rs("rubrik")
rubriken(i,1) = rs("parent")
rubriken(i,2) = rs("id")
rubriken(i,3) = rs("rank")
end if
i=i+1
rs.movenext
wend
arrayLaenge=i-1
' ***** UPDATE PRODUKT *****
if request.form("b1") = "update" then
save = true
rubrik = request.form("rubrik")
preis = check1(request.form("preis"))
produkt = check(request.form("produkt"))
pic = request.form("pic")
if len(pic)<1 then pic = " "
nummer = check(request.form("nummer"))
beschreibung = check(request.form("beschreibung"))
if save = true then
sql = "update produkte set bezeichnung = '"&produkt&"', beschreibung = '"&beschreibung&"', bild = '"&pic&"', artikelnr = '"&nummer&"', preis = "&preis&", rubrik = "&rubrik&" where id = " & id
db.execute(sql)
end if
end if
rs.close
db.close
set rs = nothing
set db = nothing
%>
PW99 MiniShop
<%
if save = true then
Erase rubriken
%>
<%
end if
%>
<%
Erase rubriken
%>
<%
if save = true then
Erase rubriken
%>
<%
end if
%>
<%
Erase rubriken
%>