
<!--#include file="conn.asp"-->

<%  id=request.querystring("id")
url=request.form("url")
 bid=request.querystring("bid")
    if id="" or  not isnumeric(id) then
response.write"错误的请求"
response.end 
end if

username=Request.Cookies("esung")("username")
    password=Request.Cookies("esung")("password")
  set rs1=server.createobject("adodb.recordset")
    sql="select * from member where username='" &username& "'  "
    rs1.open sql,conn,1,1
    if  rs1.eof then
response.write"<script language='javascript'>alert('用户名密码错误！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if
  if password<>rs1("password") then
  response.write"<script language='javascript'>alert('用户名密码错误！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if
  
  

   bid=trim(request.form("bid"))
 
set rs=server.createobject("adodb.recordset")
sql="select * from book where id="&id
rs.open sql,conn,3,3
  rs("bid")=bid
rs.update
rs.close
set rs=nothing
response.redirect url
%>

