sessions??
Jeg har brug for hjælp til at det kun må være medlemmer der kan skrive og gove roser i dette script. Er det muligt??Jeg ved godt det er lidt langt:-)
<!--#include virtual="/dev/_header.asp"-->
<font size="3" face="Verdana, Arial, Helvetica, sans-serif"> </font>
<table width="96%" border="0" align="center">
<tr bgcolor="#000000">
<td align="left" valign="top" width="150" height="3"></td>
<td align="left" valign="top" height="3"></td>
<td width="150" align="left" valign="top" height="3"></td>
</tr>
<tr>
<td align="left" valign="top" colspan="3">
<p>
<font size="3" face="Verdana, Arial, Helvetica, sans-serif"><font face="Arial, Helvetica, sans-serif" color="#000000">
<b><font face="Verdana, Arial, Helvetica, sans-serif">
<%
'Åbn databasen
Set conntemp = Server.CreateObject("ADODB.Connection")
DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & server.mappath("/data/db.mdb") & "; UID=Administrator; PWD="
conntemp.open DSN
funktion=request("funktion")
mode=request("mode")
%>
<% if funktion="stem" then %>
<% stem1 = "SELECT * from Nyheder WHERE id=" & request("id")
set rstemp = conntemp.execute(stem1) %>
<% strkarakter = rstemp("Vurdering")
strkarakter = strkarakter + Request.Form("karakter")
strvurderinger = rstemp("AntalVurderinger")
strvurderinger = strvurderinger + 1
strGennemsnit = (strkarakter / strvurderinger) %>
<% SQLstem = "UPDATE Nyheder SET vurdering ='" & (strkarakter) & "', snit ='" & (strGennemsnit) & "', AntalVurderinger ='" & (strvurderinger) & "' WHERE id="& request("id")&" "
conntemp.execute(sqlstem) %>
<% end if %>
<% if funktion="kommentar" then %>
<%
conntemp.execute("UPDATE nyheder SET Kommentarer = Kommentarer + 1 WHERE id="& request("id"))
%>
<%
strkommentar = Request.Form("kommentar")
strkommentar = Replace(strkommentar,"'","'")
strkommentar = Replace(strkommentar,vbCRLF,"<br>")
strnavn = Request.Form("navn")
strnavn = Replace(strnavn,"'","'")
stremail = Request.Form("email")
stremail = Replace(stremail,"'","'")
strartikelid = Request.Form("artikelid")
strartikelid = strartikelid
%>
<%
SQLkommentar = "INSERT INTO [kommentarer] (kommentar,navn,email,artikelid) VALUES ('" & (strkommentar) & "', '" & (strnavn) & "', '" & (stremail) & "', '" & (strartikelid) & "')"
conntemp.execute(SQLkommentar) %>
<% end if %>
<%
if mode="nyhed" then %>
<% sql = "SELECT * from Nyheder WHERE id=" & request("id")
set rstemp = conntemp.execute(sql)
%>
<%
conntemp.execute("UPDATE nyheder SET count = count + 1 WHERE id="& rstemp("id"))
%>
<% response.write "" & rstemp("overskrift") & "" %>
</font></b></font></font>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000">
<% response.write "" & rstemp("tekst") & "" %>
</font>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Skrevet af
: <a href="nyheder.asp?mode=journalist&id=<% response.write "" & rstemp("Journalist") & "" %>">
<% response.write "" & rstemp("Journalist") & "" %>
</a> den
<% response.write "" & rstemp("dato") & "" %>
</font> <br>
<br>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Vurdering</b></font></p>
<p>
<% if funktion="stem" then %>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">Tak for din
stemme.</font></p>
<p>
<% end if %>
<%
intVurdering = rstemp("Vurdering")
intAntalVurderinger = rstemp("AntalVurderinger")
If intAntalVurderinger = 0 Then %>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">Denne artikel
er endnu ikke blevet vurderet.</font><br>
<%
Else
intGennemsnit = (intVurdering / intAntalVurderinger)
%>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">Denne artikel
har fået vurdering
<% Response.Write "" & (left(intGennemsnit,4)) & "" %>
ud af 5 roser<br>
Den er blevet vurderet
<% Response.Write "" & intAntalVurderinger & ""%>
gang(e)</font>
<% end if %>
</p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Giv din
vurdering</b></font>
<form name="stem" method="post" action="nyheder.asp?mode=nyhed&id=<% response.write "" & rstemp("id") & "" %>&funktion=stem">
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">Giv
din vurdering - optil 5 roser</font> <br>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2"><br>
</font>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="27%">
<select name="karakter">
<option value="1">1 rose</option>
<option value="2">2 roser</option>
<option value="3">3 roser</option>
<option value="4">4 roser</option>
<option value="5">5 roser</option>
</select>
</td>
<td width="73%">
<input type="submit" name="submit" value="Vurder">
</td>
</tr>
</table>
</form>
<br>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Kommentarer</b></font>
<p>
<%
sqlkommentar = "SELECT * from kommentarer WHERE ArtikelID=" & request("id") & " ORDER BY dato desc"
set RS = conntemp.execute(sqlkommentar)
If (Not RS.BOF) And (Not RS.EOF) Then
RS.MoveFirst
While Not RS.EOF
%>
<font size="2" face="Verdana, Arial, Helvetica, sans-serif" >
<% response.write "" & rs("kommentar") & "" %>
</font> <br>
<font size="1" face="Verdana, Arial, Helvetica, sans-serif" >skrevet af
<a href="mailto:<% response.write "" & rs("email") & "" %>">
<% response.write "" & rs("navn") & "" %></a>
den
<% response.write "" & rs("dato") & "" %>
</font>
<p>
<% RS.MoveNext
Wend
Else %>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">Der er endnu
ikke skrevet kommentarer til denne artikel.<br>
</font> <br>
<%
End If
%>
<form name="kommentar" method="post" action="nyheder.asp?mode=nyhed&id=<% response.write "" & rstemp("id") & "" %>&funktion=kommentar">
<font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Kom med
en kommentar </b></font>
<p>
<% if funktion="kommentar" then %>
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">Tak for
din kommentar </font>
<p>
<% end if %>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr align="left" valign="top">
<td width="23%"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Kommentar
</font></td>
<td width="77%">
<textarea name="kommentar" cols="35" rows="4"></textarea>
</td>
</tr>
<tr align="left" valign="top">
<td width="23%"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"></font></td>
<td width="77%">
<input type="hidden" name="navn" size="35" value="">
</td>
</tr>
<tr align="left" valign="top">
<td width="23%"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Email</font></td>
<td width="77%">
<input type="text" name="email" size="35" value="">
<input type="hidden" name="artikelid" size="35" value="<% response.write "" & rstemp("id") & "" %>">
</td>
</tr>
<tr>
<td width="23%"> </td>
<td width="77%">
<input type="submit" name="submit" value="Kommenter">
</td>
</tr>
</table>
</form>
<p>
<p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="1">
<%
Elseif mode="journalist" and request("id") <> "" then %>
<% sql = "SELECT * from admin WHERE navn='" & request("id") & "'"
set rstemp = conntemp.execute(sql)
%>
</font><font face="Verdana, Arial, Helvetica, sans-serif" size="3"> <b>Journalist
oplysninger</b><br>
<br>
</font>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="16%"><font face="Verdana, Arial, Helvetica, sans-serif" font size="2">Navn</font></td>
<td width="84%"><font face="Verdana, Arial, Helvetica, sans-serif" font size="2">
<% response.write "" & rstemp("navn") & "" %>
</font></td>
</tr>
<tr>
<td width="16%"><font face="Verdana, Arial, Helvetica, sans-serif" font size="2">Email</font></td>
<td width="84%"><font face="Verdana, Arial, Helvetica, sans-serif" font size="2">
<a href="mailto:<% response.write "" & rstemp("email") & "" %>">
<% response.write "" & rstemp("email") & "" %>
</a> </font></td>
</tr>
</table>
<% else %>
<p><font face="Verdana, Arial, Helvetica, sans-serif" font size="3"><b>Artikeloversigt</b></font>
<% sql = "SELECT * from Nyheder ORDER BY id desc"
set rstemp = conntemp.execute(sql)
do while not (rstemp.eof or rstemp.bof)
%>
</p>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="50%" colspan="2"><font face="Verdana, Arial, Helvetica, sans-serif" font size="2"><a href="nyheder.asp?mode=nyhed&id=<% response.write "" & rstemp("id") & "" %>">
<b>
<% response.write "" & rstemp("overskrift") & "" %>
</b></a></font></td>
<td width="50%" colspan="2">
<div align="right"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Skrevet
af <a href="nyheder.asp?mode=journalist&id=<% response.write "" & rstemp("Journalist") & "" %>">
<% response.write "" & rstemp("Journalist") & "" %>
</a></font><font face="Verdana, Arial, Helvetica, sans-serif" size="2">
</font> </div>
</td>
</tr>
<tr>
<td colspan="4"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">
<br>
<%
strtekst = rstemp("tekst")
strtekst = Replace(strtekst,"<br>"," ") %>
<% response.write "" & (left((strtekst),70)) & "" %>.....
<br>
</font></td>
</tr>
<tr>
<td width="25%"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Skrevet
den
<% response.write "" & (left(rstemp("dato"),5)) & "" %>
</font></td>
<td width="25%"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Læst
<% response.write "" & rstemp("count") & "" %> gange
</font></td>
<td width="25%"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Karakter
<% response.write "" & (left(rstemp("snit"),3)) & "" %>
</font></td>
<td width="25%"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Kommenteret
<% response.write "" & rstemp("kommentarer") & "" %> gange
</font></td>
</tr>
</table>
<br>
<%
rstemp.movenext
loop
%>
<% end if %>
<%
rstemp.close
conntemp.close
set conntemp=nothing
%>
<font face="Verdana, Arial, Helvetica, sans-serif"> </font><font face="Arial, Helvetica, sans-serif">
</font> <font face="Verdana, Arial, Helvetica, sans-serif" size="2"><br>
</font><br>
</td>
</tr>
<tr bgcolor="#000000">
<td align="left" valign="top" width="150" height="3"></td>
<td align="left" valign="top" height="3"></td>
<td width="150" align="left" valign="top" height="3"></td>
</tr>
</table>
<!--#include virtual="/dev/_footer.asp"-->
