%
IF request.querystring("action")=empty or not isNUMERIC(request.querystring("NO")) or request.querystring("action")=empty then
response.write("")
response.end()
ELSE
if session("postboard_admin")<>true then
response.write("")
response.end()
else
%>
<% if request.querystring("action")="delete" then
rs.open "delete from message where id="&request.querystring("NO"),conn,2
response.write("")
elseif request.querystring("action")="shield" then
rs.open "update message set shield=true where id="&request.querystring("NO"),conn,2
response.write("")
elseif request.querystring("action")="notshield" then
rs.open "update message set shield=false where id="&request.querystring("NO"),conn,2
response.write("")
else
response.write("")
response.end()
end if
end if
END IF
%>