<%
if session("userid1")="" then
Response.Redirect "Login.asp?page=UploadCategory"
end if
Function ReplaceName(Name)
Dim LeftStr , RightStr
Dim SingleFound ,AtPlace
AtPlace = InStr(1, Name, "'")
If AtPlace > 0 Then
SingleFound = True
LeftStr = Left(Name, InStr(AtPlace, Name, "'") - 1) & "''"
RightStr = Right(Name, Len(Name) - InStr(AtPlace, Name, "'"))
While SingleFound = True
If InStr(AtPlace + 1, Name, "'") > 0 Then
LeftStr = LeftStr & Mid(Name, AtPlace + 1, InStr(AtPlace + 1, Name, "'") - AtPlace - 1) & "''"
RightStr = Right(Name, Len(Name) - InStr(AtPlace + 1, Name, "'"))
AtPlace = InStr(AtPlace + 1, Name, "'")
SingleFound = True
Else
SingleFound = False
End If
Wend
ReplaceName = LeftStr & RightStr
Else
ReplaceName = Name
End If
End Function
%>
<% set conn = Server.CreateObject("adodb.Connection")
connstr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("tsl.mdb")
conn.open connstr
mode=Request.QueryString("mode")
if mode="Add" then
flag="Y"
categoryname=Request.Form("cat_name")
catadd="insert into category_mast(cat_name) values('"&ReplaceName(categoryname)&"')"
end if
if mode="Modify" then
flag="Y"
categoryname=Request.Form("cat_name")
categoryid=Request.Form("cat_id")
catadd="update category_mast set cat_name='"&ReplaceName(categoryname)&"' where cat_id="&categoryid&""
end if
if mode="Delete" then
flag="Y"
categoryname=Request.Form("cat_name")
categoryid=Request.Form("cat_id")
catadd="delete from category_mast where cat_id="&categoryid
end if
if flag="Y" then
set rs=server.createobject("adodb.recordset")
conn.Execute (catadd)
end if
conn.Close
%>
