/users/users.asp filen:
<% if session("loginOK") = "jada" then
session("loginOK") = "jada"
%>
<html>
<head>
<title>Bruger side</title>
</head>
<body>
<%
Set rs = Server.CreateObject("ADODB.RecordSet")
Set Conn = Server.CreateObject("ADODB.Connection")
'Include database connection string %>
<!--#include file="../dsn.asp"-->
<%
Conn.Open (DataBase)
strSQL = "SELECT * FROM members WHERE memberID=" & session("loginMemberID") & ";"
Set rs = Conn.Execute(strSQL)
%>
<table width="100%">
<tr><td>Dit navn er: <%=rs("realname")%></td></tr>
</table>
<br>
<br>
<table><tr><td>
<a href="retuser.asp?mode=ret">Change Personal settings.</a>
</td></tr>
<% if session("loginUserType") = 1 then %>
<tr><td><a href=listmembers.asp>Admin List/edit/delete members</a></td></tr>
<tr><td><a href=retuser.asp?mode=opret>Add member</a></td></tr>
<% end if %>
</table>
<%
Conn.Close
Set rs = Nothing
%>
</body>
</html>
<% else %>
response.redirect "../login/login.asp"
<% end if %>
/users/retuser.asp filen:
<%
if session("loginOK") = "jada" then
session("loginOK") = "jada"
mode = Request("mode")
submode = Request("submode")
if mode = "" then
if session("loginUserType") = 1 then
mode = "opret"
else
mode = "ret"
end if
end if
if mode="slet" and (NOT (session("loginUserType") = 1)) then
mode = "ret"
end if
select case mode
case "opret"
modeInfo = "Add member"
submode = "adminpage"
case "ret"
modeInfo = "Change data"
case "slet"
modeInfo = "Delete Member"
end select
%>
<html>
<head>
<title><%=modeInfo%></title>
</head>
<body>
<center>
<!--#include file="../dsn.asp"-->
<h4><%=modeInfo%>:</h4>
<%
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open (DataBase)
realname = ""
username = ""
password = ""
email = ""
icqnumber = ""
showICQ = ""
userType = 0
memberID = Request("memberID")
if memberID = "" then memberID = session("loginMemberID")
if mode = "ret" or mode = "slet" then
strSQL = "SELECT * FROM members WHERE memberID=" & memberID & ";"
set rs = conn.Execute (strSQL)
if not (rs.BOF and rs.EOF) then
realname = rs("realname")
username = rs("username")
password = rs("userpassword")
email = rs("email")
icqnumber = rs("icqnumber")
if rs("showicq") = 1 then showICQ = "checked"
userType = rs("userType")
end if
rs.Close
end if
Conn.Close
%>
<table border=1>
<form method="post" action="gemuser.asp">
<input type="hidden" name="mode" value="<%=mode%>">
<input type="hidden" name="memberID" value="<%=memberID%>">
<tr><td>Real Name:</td><td><input name="realname" value="<%=realname%>"></td></tr>
<tr><td>Username (login):</td><td><input name="username" value="<%=username%>"></td></tr>
<tr><td>Password (login):</td><td><input type="password" name="password" value="<%=password%>"></td></tr>
<tr><td>Email:</td><td><input name="email" value="<%=email%>"></td></tr>
<tr><td>ICQ: <input type="checkbox" name="showicq" value="ON" <%=showICQ%>>Show to all</td><td><input name="icqnumber" value="<%=icqnumber%>"></td></tr>
<% if (session("loginUserType") = 1) AND submode="adminpage" then %>
<tr><td>UserType (0 user, 1 admin):</td><td><input name="userType" value="<%=userType%>"></td></tr>
<input type="hidden" name="submode" value="<%=submode%>">
<% end if %>
<tr><td colspan=2 align="center"><input type="submit" value="<%=modeInfo%>" name="Action"></td></tr>
</form>
</table>
</form>
</center>
</body>
</html>
<%else
Response.redirect "../login/login.asp"
end if%>
/users/gemuser.asp filen:
<% Response.Buffer = true
if session("loginOK") = "jada" then
%>
<html>
<body>
<!--#include file="../dsn.asp"-->
<%
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open (DataBase)
'Hent data fra formen
mode = Request.Form("mode")
submode = Request.Form("submode")
memberID = Request.Form("memberID")
realname = fixSring(Request.Form("realname"))
username = fixSring(Request.Form("username"))
password = fixSring(Request.Form("password"))
email = fixSring(Request.Form("email"))
icqnumber = fixSring(Request.Form("icqnumber"))
showicq = Request.Form("showicq")
usertype = Request.Form("usertype")
'Validate
Indtastfejl = False
if isNumeric (memberID) = false then
Indtastfejl = True
Response.Write "Error : memberID out of range (" & memberID & ")"
end if
if mode = "" then
Indtastfejl = True
Response.Write "Error : mode out of range (" & mode & ")"
end if
if Indtastfejl = False then
errorCode = ""
if usertype = "" then usertype = 0
if showicq = "ON" then
showicq = 1
else
showicq = 0
end if
strSQLdelete = ""
if mode = "opret" then
'Test om bruge (username) er taget
'Response.Write strSQL & "<br>"
strSQL = "SELECT * FROM members WHERE username='" & username & "';"
set rs = Conn.Execute(strSQL)
if (rs.BOF AND rs.EOF) then
'Brugernavnet er frit indsæt user(member) data
strSQL = "INSERT INTO members (realname, username, userpassword, email, icqnumber, showicq, usertype) "
strSQL = strSQL & "VALUES ('" & realname & "',"
strSQL = strSQL & " '" & username & "',"
strSQL = strSQL & " '" & password & "',"
strSQL = strSQL & " '" & email & "',"
strSQL = strSQL & " '" & icqnumber & "',"
strSQL = strSQL & " " & showicq & ","
strSQL = strSQL & " " & usertype & ""
strSQL = strSQL & ");"
'Response.Write strSQL & "<br>"
Conn.Execute(strSQL)
else
errorCode = "Username allready in use. Select a new."
end if
elseif mode = "ret" then
'Tjek om det er nyt brugernavn og om det er frit.
strSQL = "SELECT * FROM members WHERE username='" & username & "' AND memberID <> " & memberID & ";"
'Response.Write strSQL & "<br>"
set rs = Conn.Execute(strSQL)
if (rs.BOF AND rs.EOF) then
'Ikke nyt bruger navn eller nyt bruger navn er frit
strSQL = "UPDATE members SET realname = '" & realname & "'"
strSQL = strSQL & ", username='" & username & "'"
strSQL = strSQL & ", userpassword='" & password & "'"
strSQL = strSQL & ", email='" & email & "'"
strSQL = strSQL & ", icqnumber='" & icqnumber & "'"
strSQL = strSQL & ", showicq=" & showicq & ""
if submode = "adminpage" then
strSQL = strSQL & ", usertype=" & usertype & ""
end if
strSQL = strSQL & " WHERE memberID = " & memberID & ";"
'Response.Write strSQL & "<br>"
Conn.Execute(strSQL)
'Tjek om Admin har ændre charname OR charguildtitle
if submode = "adminpage" then
'Her kan specille admin felter / opdateringer ligge.
end if
else
errorCode = "Username allready in use. Select a new."
end if
elseif mode = "slet" then
strSQL = "DELETE FROM members WHERE memberID = " & memberID & ";"
'Slet member fra members tabellen
'Response.Write strSQL & "<br>"
Conn.Execute (strSQL)
end if
'Response.Write strSQL & "<br>"
Conn.Close
Response.Clear
if submode="adminpage" then
Response.Redirect("retuser.asp?mode="&mode&"&submode="&submode&"&memberid="&memberID)
else
Response.Redirect("users.asp")
end if
end if 'Indtastfejl = False
%>
</body>
</html>
<%else
Response.Write "Du skal være logget ind for at ændre noget"
end if%>
<%
function fixSring(strInput)
if len(fixSring) > 0 then
outString = replace(strInput,"'","''")
fixSring = outString
else
fixSring = strInput
end if
end function
%>
/users/listmembers.asp filen:
<%
if session("loginOK") = "jada" AND session("loginUserType") = 1 then
session("loginOK") = "jada"
%>
<html>
<head>
<title>Liste med alle brugere</title>
</head>
<body>
<center>
<b>List af brugere:</b><br><br>
<!--#include file="../dsn.asp"-->
<%
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open (DataBase)
Set rs = Server.CreateObject("ADODB.RecordSet")
strSQL = "SELECT * FROM members ORDER BY username;"
Set rs = Conn.Execute(strSQL)
If Not (rs.BOF Or rs.EOF) Then
%>
<table border=0>
<tr>
<td><b>Real Name</b></td>
<td><b>Username</b></td>
<td><b>UserType</b></td>
<td><b>Email</b></td>
<td><b>ICQ</b></td>
<% if session("loginUserType") = 1 then %>
<td><b>edit</b></td>
<td><b>delete</b></td>
<% end if %>
</tr>
<%
Do While Not rs.EOF
Response.Write "<tr>"
Response.Write "<td>" & rs("realname") & "</td>"
Response.Write "<td>" & rs("username") & "</td>"
Response.Write "<td>" & rs("usertype") & "</td>"
Response.Write "<td>" & rs("email") & "</td>"
Response.Write "<td>" & rs("icqnumber") & "</td>"
if session("loginUserType") = 1 then
Response.Write "<td><center><a href=""retuser.asp?mode=ret&submode=adminpage&memberid=" & rs("memberID") & """>edit</a></center></td>"
Response.Write "<td><center><a href=""retuser.asp?mode=slet&submode=adminpage&memberid=" & rs("memberID") & """>delete</a></center></td>"
end if
Response.Write "</tr>"
rs.MoveNext
loop
%>
</table>
<%
else
Response.Write "hmm wierd no users found..."
end if
'Rydder op efter os
Rs.Close
Conn.Close
%>
</center>
</body>
</html>
<%else
Response.Write "Du skal være logget ind for at ændre noget"
end if%>
Ny bruger
Nybegynder
Opret
Preview
