<%If Session("Login") = "1" Then%>

<%If Request.QueryString("var") = "" Then%> <%'CONSULTA GENERAL%> <% sqlConsultaGral = " SELECT * FROM Admin ORDER BY UserName" Set rsConsultaGral = Server.CreateObject("ADODB.Recordset") rsConsultaGral.Open sqlConsultaGral,conn %> <%'TITULOS%> <%While Not rsConsultaGral.EOF%> <%'INFO%> <%rsConsultaGral.MoveNext Wend %> Alta Usuario Borrar UserName Password Modificar " onclick="return validar2()"> <%=rsConsultaGral("UserName")%> ******** " > <%End If%> <%If Request.QueryString("var") = "Nuevo" Then%> Nuevo Ususario  Nombre :  Apellido :  User Name :  Password : <%If Request.Form("btnGrabar") = "Grabar" Then insNuevo = " INSERT INTO admin (nombre,apellido,username,password) VALUES ('" & Request.Form("nombre") & "','" & Request.Form("apellido") & "','" & Request.Form("username") & "','" & Request.Form("password") & "')" conn.Execute (insNuevo) Response.Redirect "?var=" End If%> <%End If%> <%If Request.QueryString("var") = "Borrar" Then sqlBorrar = " DELETE FROM admin WHERE iduser='" & Request.QueryString("id") & "'" conn.Execute (sqlBorrar) Response.Redirect "?var=" End If%> <%If Request.QueryString("var") = "Modificar" Then%> <% sqlModificar = " SELECT * FROM admin WHERE iduser='" & Request.QueryString("id") & "'" Set rsModificar = Server.CreateObject("ADODB.Recordset") rsModificar.Open sqlModificar,conn %> > Modificar Usuario  Nombre : ">  apellido : ">  User Name : ">  Password : "> <%If Request.Form("btnActualizar") = "Actualizar" Then updActualizar = " UPDATE admin SET Nombre='" & Request.Form("nombre") & "', apellido ='" & Request.Form("apellido") & "', username = '" & Request.Form("username") & "', password = '" & Request.Form("pass") & "' WHERE iduser ='" & Request.Form("txtId") & "'" conn.Execute (updActualizar) Response.Redirect "?var=" End If%> <%End If%>

<% Else Response.Redirect("Login.asp") End If %>