<!--#include file="conn.asp"-->
<%if session("admin")="administrator" then
	id=request.querystring("id")
	id=replace(id,"""","")
	id=replace(id,"'","")
	if id="" then response.redirect("shop.asp") end if
	sql="DELETE Products WHERE ID="&ID
	conn.execute sql
	response.redirect("shop.asp")
else
	response.redirect("shop.asp")
end if
conn.close
%>