...och såhär ser admin.asp ut (dit koden ska flyttas).
Function Fixa(str)
Fixa = Replace(Trim(str),"'","''")
End function
If Request.QueryString("do") = "" Then%>
<div align="center">
<table width="400" cellpadding="4" cellspacing="0">
<form name="loggain" method="post" action="admin.asp?do=check">
<tr>
<td colspan="2" style="border-bottom: 1px solid #000000"><font size="2"><b>Admin:</b></font></td>
</tr>
<tr>
<td><b>Adminnamn:</b></td>
<td><input type="text" name="admin1" size="15">
</tr>
<tr>
<td><b>Lösenord:</b></td>
<td><input type="password" name="admin2" size="15">
</tr>
<tr>
<td style="border-top: 1px solid #000000"> </td>
<td style="border-top: 1px solid #000000"><input type="submit" value="Logga in"></td>
</tr>
</form>
</table>
</div>
<%End If
If Request.QueryString("do") = "check" Then
If Request.Form("admin1") = Losen1 AND Request.Form("admin2") = Losen2 Then
Session("gastbok") = Secure
Session.TimeOut = 40
Response.Redirect "admin.asp?do=inne"
Else
Response.Redirect "admin.asp?mess=fel"
End If
End If
If Request.QueryString("do") = "inne" AND Session("gastbok") = Secure Then%>
<table border="0" width="400" align="center" cellpadding="3" cellspacing="10">
<form method="post" action="<%=INC%>?do=add" name="gastbok" onSubmit="return Gb()">
<tr>
<td colspan="2" style="border-bottom: 1px solid #006666"><font size="3"><b>
<p><div align="center"><div class="titel">Dagbok / Journal</div></p></b></font>
<p> </p>
</td>
</tr>
<tr>
<td>Rubrik:<br><input type="text" name="rubrik" size="60"></td>
</tr>
<tr>
<td valign="top" colspan="2">Meddelande:<br><textarea name="msg" cols="60" rows="8"></textarea></td>
</tr>
<tr>
<td colspan="2"><input type="submit" value="Skicka / Send"></td>
</tr>
</form>
</table>
<div align="center">
<table width="400" cellpadding="4" cellspacing="0">
<tr>
<td align="left" style="border-bottom: 1px solid #000000"><font size="2"><b><a href="admin.asp?do=inne">Dagbokadmin:</a></b></font></td>
<td align="right" style="border-bottom: 1px solid #000000"><font size="2"><b><a href="admin.asp?do=logut">Logga ut</a></b></font></td>
</tr>
</table>
</div>
<%If Request.Querystring("action")= "" AND Session("gastbok") = Secure Then%>
<div align="center">
<table width="400" cellpadding="4" cellspacing="0">
<%Set RecSet = Server.CreateObject("ADODB.Recordset")
Const gbaps1 = 15
Sidan = Request.QueryString("sida")
If Sidan = "" then
sida = 1
Else
sida = Sidan
End If
With RecSet
.CursorLocation = 3
.CacheSize = gbaps1
End With
SQL = "Select * From gastbok Order By datum desc"
RecSet.Open SQL, Conn
If RecSet.EOF Then%>
<tr>
<td height="14">Inga inlägg i gästboken!</td>
</tr>
</table>
</div>
<div align="center">
<%Else%>
<tr width="14">
<td width="150" style="border-bottom: 1px solid #000000"><b>Rubrik:</b></td>
<td width="90" style="border-bottom: 1px solid #000000"><b>Datum:</b></td>
<td width="80" style="border-bottom: 1px solid #000000"><b>Namn:</b></td>
<td align="right" width="80" style="border-bottom: 1px solid #000000"> </td>
</tr>
<%With RecSet
.MoveFirst
.PageSize = gbaps1
.AbsolutePage = sida
End With
Sidor = RecSet.PageCount
Count = 0
Do While Not RecSet.EOF And Count < RecSet.PageSize %>
<tr>
<td><b><%=RecSet("rubrik")%></td>
<td><%=FormatDateTime(RecSet("Datum"),2)%></b></td>
<td><%=RecSet("namn")%></b></td>
<td align="right"><a href="admin.asp?do=inne&action=svara&id=<%=RecSet("id")%>"><img src="bilder/svara.gif" border="0" alt="Svara"></a> <a href="admin.asp?do=inne&action=change&id=<%=RecSet("id")%>"><img src="bilder/update.gif" border="0" alt="Ändra"></a> <a href="admin.asp?do=inne&action=delete&id=<%=RecSet("id")%>" onClick="return confirm('Vill du verkligen ta bort <%=RecSet("rubrik")%>?');"><img src="bilder/trash.gif" border="0" alt="Ta bort"></a></td>
</tr>
<%Count = Count + 1
RecSet.MoveNext
Loop
If Sidor > 1 Then%>
<tr>
<td colspan="4" style="border-top: 1px solid #000000"><b>
<%If Sidor <> 1 Then
For Sid = 1 To Sidor
If (Int(Sid)) = (Int(sida)) Then%><font color="#ff0000"><%=Sid%></font><%Else%> <a href="admin.asp?do=inne&sida=<%=Sid%>"><%=Sid%></a> <%End If%>
<%Next%></b></font>
</td>
</tr>
<%End If
End If%>
</table>
</div>
<%RecSet.Close
Set RecSet = Nothing
End If
ElseIf Request.Querystring("action")= "change" AND Session("gastbok") = Secure Then
Set RecSet = Conn.Execute("Select * From gastbok Where id="& Request.Querystring("id"))%>
<div align="center">
<table width="400" cellpadding="4" cellspacing="0">
<form method="post" action="admin.asp?do=inne&action=andrat&id=<%=Request.Querystring("id")%>" name="gastbok" onSubmit="return Gb()">
<tr>
<td colspan="2" style="border-bottom: 1px solid #000000"><b>Skrivet av <%=RecSet("namn")%></b> | <%=FormatDateTime(RecSet("datum"),2)%> (<%=FormatDateTime(RecSet("datum"),4)%>) | <%=RecSet("ip")%></td>
</tr>
<tr>
<td><b>Namn:</b></td><td><input type="text" name="namn" size="35" value="<%=RecSet("namn")%>"></td>
</tr>
<tr>
<td><b>Rubrik:</b></td><td><input type="text" name="rubrik" size="35" value="<%=RecSet("rubrik")%>"></td>
</tr>
<tr>
<td><b>Email:</b></td><td><input type="text" name="mail" size="35" value="<%=RecSet("mail")%>"></td>
</tr>
<tr>
<td><b>Hemsida:</b></td><td><input type="text" name="url" size="35" value="<%=RecSet("url")%>"></td>
</tr>
<tr>
<td colspan="2"><b>Inlägg:</b><br><textarea cols="60" rows="10" name="msg" size="45"><%=RecSet("msg")%></textarea></td>
</tr>
<tr>
<td colspan="2"><input type="Submit" name="andra" value="Ändra"></td>
</tr>
</form>
</table>
</div>
<%RecSet.Close
Set RecSet = Nothing
ElseIf Request.Querystring("action") = "andrat" AND Session("gastbok") = Secure Then
Namn = Request.Form("namn")
Rubrik = Fixa(Request.Form("rubrik"))
Mail = Request.Form("mail")
Url = Request.Form("url")
Msg = Fixa(Request.Form("msg"))
Conn.execute("Update gastbok Set namn='" & Namn & "',rubrik='" & Rubrik & "',mail='" & Mail & "',url='" & Url & "',msg='" & Msg & "' Where id = "& Request.Querystring("id"))
Response.Redirect "admin.asp?do=inne"
ElseIf Request.Querystring("action") = "delete" AND Session("gastbok") = Secure Then
Conn.Execute("Delete * From gastbok Where id=" & Request.Querystring("id"))
Response.Redirect "admin.asp?do=inne"
ElseIf Request.Querystring("action") = "svara" AND Session("gastbok") = Secure Then
Set RecSet = Conn.Execute("Select * From gastbok Where id="& Request.Querystring("id"))%>
<div align="center">
<table width="400" cellpadding="4" cellspacing="0">
<form method="post" action="admin.asp?do=inne&action=svarat&id=<%=RecSet("id")%>" name="answer">
<tr>
<td colspan="2" style="border-bottom: 1px solid #000000"><b>Skrivet av <%=RecSet("namn")%></b> | <%=FormatDateTime(RecSet("datum"),2)%> (<%=FormatDateTime(RecSet("datum"),4)%>)</td>
</tr>
<tr>
<td colspan="2" style="border-bottom: 1px solid #000000"><%=Replace(RecSet("msg"), vbCrLf, "<br>")%></td>
</tr>
<tr>
<td colspan="2"><b>Skriv ditt svar här:</b><br><textarea cols="60" rows="10" name="svar"><%=RecSet("svar")%></textarea></td>
</tr>
<tr>
<td colspan="2"><input type="Submit" name="andra" value="Posta svaret"></td>
</tr>
</form>
</table>
</div>
<%ElseIf Request.Querystring("action") = "svarat" AND Session("gastbok") = Secure Then
Svar = Fixa(Request.Form("svar"))
Conn.Execute("Update gastbok Set Svar='"& Svar &"' Where id=" & Request.Querystring("id"))
Response.Redirect "admin.asp?do=inne"
End If
ElseIf Request.Querystring("do") = "logut" Then
Session.Abandon
Response.Redirect "admin.asp"
End If
Conn.Close
Set Conn = Nothing%>
Jag vet, massor med kod igen...

