<% if session("user_ses")="" then response.write"" response.End() end if %> <% user_name=session("user_ses") reinfo_id=request.QueryString("id") if not IsNumeric(reinfo_id) then response.write"" response.End() end if set rs1=server.createobject("ADODB.Recordset") sql1="select * from reinfo where reinfo_id="&reinfo_id rs1.open sql1,conn,1,1 if rs1.eof then response.write"" response.End() else info_id=rs1("reinfo_infoid") set rs2=server.createobject("ADODB.Recordset") sql2="select info_username from info where info_id="&info_id rs2.open sql2,conn,1,1 if user_name<>rs2("info_username") then response.write"" response.End() end if rs2.close set rs2=nothing end if conn.execute("delete * from reinfo where reinfo_id="&reinfo_id) conn.execute("update info set info_reinfonum=info_reinfonum-1 where info_id="&info_id) response.Redirect("lyadmin.asp?id="&info_id) %>