<%
'************************************************************************
' displays all currencies available
' VP-ASP 6.50
' June 29, 2005 HK
'***********************************************************************
ShopCheckAdmin ""
dim currenturl, url
dim rs
dim dbc
currenturl="shopcurrencyadmin.asp"
'response.write getsess("returnurl")
''response.end
'VP-ASP 6.08 - wasn't redirecting correctly after change
'if (getsess("returnurl") = "") OR (right(getsess("returnurl"), len(getsess("returnurl")) - instrrev(getsess("returnurl"), "/")) = currenturl) then
' if request.ServerVariables("HTTP_REFERER") > "" then
' setsess "returnurl", request.ServerVariables("HTTP_REFERER")
' else
' end if
'end if
ShopOpendatabase dbc
If Request("cid")<>"" then
'VP-ASP 6.08a - Security fix
sql="select * from currencyvalues where cid= '" & CleanChars(Request("CID")) & "'"
set rs=dbc.execute(sql)
if not rs.eof then
SetSess "CID",rs("cid")
setSess "Fullunitname",rs("fullunitname")
SetSess "Conversionvalue",rs("conversionvalue")
SetSess "Newcurrencysymbol",rs("currencysymbol")
SetSess "flagimage",rs("theimage")
else
debugwrite "not found" & request("cid")
end if
closerecordset rs
shopclosedatabase dbc
Call SetCurrency(GetSess("CID"),false)
Responseredirect currenturl
else
AdminPageHeader
DisplayForm
AdminPageTrailer
end if
ShopClosedatabase dbc
Sub DisplayForm
dim Fullunitname
dim newrow
newrow=true
'VP-ASP 6.08 - IF statement to handle different databases
if (ucase(xdatabasetype)="SQLSERVER") or (getconfig("xmysql")="Yes") OR (instr(ucase(xdatabasetype), "MYSQL") > 0) then
sql="select * from currencyvalues where theimage is not null AND hide = 0 order by fullunitname"
else
sql="select * from currencyvalues where theimage is not null AND hide = FALSE order by fullunitname"
end if
%>