Editing: homework/chk_permission.asp

<!--#include file="connectdb.asp"--> <% tb_name=session("tb_name") ' id_lecturer = Session("id_lecturer1") ' id_stu = Session("id_stu1") id_staff = Session("id_staff") type_login=session("type_login") username=session("username") ' login_name_l=ors("login_name_l") 'response.write login_name_l 'response.write username 'response.write tb_name type_login=session("type_login") select case type_login case 1 sqlall="select * from lecturer where id_lecturer="&session("username")&"" set orsall=server.createobject("adodb.recordset") orsall.open sqlall,conn,1,3 session("tb_preview")=orsall("id_administor") session("tb_edit")=1 'response.write "username=" response.write "[<a href=detail_lec.asp>"&orsall("name_lec")&" "&orsall("sur_lec")&"</a>]" case 2 sqlall="select * from student where id_stu="&session("username")&"" set orsall=server.createobject("adodb.recordset") orsall.open sqlall,conn,1,3 session("tb_edit")=1 session("tb_preview")=1 'response.write "username=" response.write "[<a href=detail_stu.asp>"&orsall("name_stu")&" "&orsall("sur_stu")&"</a>]" case 3 sqlall="select * from staff where id_staff="&session("username")&"" set orsall=server.createobject("adodb.recordset") orsall.open sqlall,conn,1,3 'response.write "username=" response.write orsall("name_st")&" "&orsall("sur_st") sql_chkpe="select * from tb_permission where id_staff='"&username&"' and tb_name ='"&tb_name&"'" Set ors_chkpe = Server.CreateObject("ADODB.Recordset") ors_chkpe.Open sql_chkpe, Conn, 1, 3 if not ors_chkpe.eof then session("tb_preview")=ors_chkpe("tb_preview") session("tb_edit")=ors_chkpe("tb_edit") end if ors_chkpe.Close set ors_chkpe = nothing end select %>