Contents of loginsert.asp:
<html> <head> <script language="VBScript"> <!--- sub checkit if len(document.xform.user_id.value) < 8 OR len(document.xform.user_id.value) > 15 then msgbox "User Id must be 8 or more characters and 15 or less characters. Re-enter." exit sub end if if len(document.xform.password.value) < 8 OR len(document.xform.password.value) > 15 then msgbox "Password must be 8 or more characters and 15 or less characters. Re-enter." exit sub end if if len(document.xform.password2.value) < 8 OR len(document.xform.password2.value) > 15 then msgbox "2nd Password entered must be 8 or more characters and 15 or less characters. Re-enter." exit sub end if if len(document.xform.user_first_name.value) < 1 OR len(document.xform.user_first_name.value) > 20 then msgbox "First Name cannot be blank. Max 20 characters. Re-enter." exit sub end if if len(document.xform.user_middle_name.value) > 20 then msgbox "Middle Name cannot be greater than 20 characters. Re-enter." exit sub end if if len(document.xform.user_last_name.value) < 1 OR len(document.xform.user_last_name.value) > 20 then msgbox "Last Name cannot be blank. Max 20 characters. Re-enter." exit sub end if if document.xform.password.value <> document.xform.password2.value then msgbox "Passwords DO NOT MATCH. Re-enter." document.xform.password.value="" document.xform.password2.value="" document.xform.password.focus exit sub end if if document.xform.user_class.selectedIndex = 0 then msgbox "You must SELECT a user classification. Try Again." document.xform.user_class.focus exit sub end if document.xform.submit end sub ---> </script> </head> <body> <center> <Table border="1"> <tr><td valign='middle' bgcolor='#999999'><img src="captsm.gif"></td> <td valign='middle' bgcolor='#999999'><center><font color="#ffffff"><font face="Comic Sans MS"> <br> <b>Insert a New User<br>into the Login Table</b> <br> </td></tr></table> <form name="xform" method="POST" action="loginsert.asp"> <% sub pass1 %> <p> <table border="1"> <tr><td>User Id</td><td> <input type="text" name="User_id" size="15" maxlength="15"></td><td>max 15 characters -- min 8 characters</td></tr> <tr><td>Password</td><td><input type="password" name="password" size="15" maxlength="15"></td><td>max 15 characters -- min 8 characters</td></tr> <tr><td>Re-Enter Password</td><td><input type="password" name="password2" size="15" maxlength="15"></td><td> for verification</td></tr> <tr><td>User First Name</td><td><input type="text" name="user_first_name" size="20" maxlength="20"></td><td>You must enter a name. Max 20 characters</td></tr> <tr><td>User Middle Name</td><td><input type="text" name="user_middle_name" size="20" maxlength="20"></td><td>Optional. Max 20 characters</td></tr> <tr><td>User Last Name</td><td><input type="text" name="user_last_name" size="20" maxlength="20"></td><td>You must enter a name. Max 20 characters</td></tr> <tr><td>User Classification</td><td> <select name="user_class"> <option value="" selected>Click and SELECT ONE <option value="Administrator">Administrator <option value="Power User">Power User <option value="Web User">Web User <option value="Inactivated">Inactivated </select> </td><td></td></tr> </table> <input type="hidden" name="token" value="2"> <br> <input type="button" onClick="checkit" value="Submit"> </center> <% end sub sub pass2 on error resume next set cn = Server.CreateObject("ADODB.Connection") fdsn="gl001" fuid="gl001" fpwd="11111" cn.open fdsn,fuid,fpwd response.write "<p>open ok" Insert_string="INSERT INTO login (user_id,password,user_first_name,user_middle_name,user_last_name,creation_date,ip_of_creator,last_mod_date,ip_of_last_mod,user_status)" Insert_string=Insert_string+" VALUES (" Insert_string=Insert_string+chr(39)+cstr(Request.form("user_id"))+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(Request.form("password"))+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(Request.form("User_first_name"))+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(Request.form("User_middle_name"))+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(Request.form("user_last_name"))+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(now)+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(Request.ServerVariables("REMOTE_ADDR"))+chr(39)+"," Insert_string=Insert_string+chr(39)+"Not yet modified"+chr(39)+"," Insert_string=Insert_string+chr(39)+"No modify date"+chr(39)+"," Insert_string=Insert_string+chr(39)+cstr(Request.Form("user_class"))+chr(39)+")" response.write "<p>insert_string="+cstr(Insert_string) cn.execute Insert_string,numa if Err = 0 and numa = 1 then response.write "<p>Added user OK.<br>Click <a href='loginsert.asp'> here</a> to add another user." response.write "<p><a href='s2003ex.htm'>Back to the Menu</a>" else If cn.Errors.Count > 0 Then for i = 0 to cn.Errors.Count - 1 response.write "<p>" etext=ucase(cn.errors(i)) k=instr(etext,"DUPLICATE") '**** response.write "<p>k="+cstr(k) if k > 0 then response.write "<p>DUPLICATE user_id IN THE login DATABASE!!<br>" response.write "userid="+cstr(request.form("user_id")) + " already entered. Click the <b>BACK</b> button to try again" exit for else response.write "<br><b>"+cn.errors(i)+"</b>" end if next end if end if end sub ' '*** top of main ' on error resume next token=request.form("token") '**** response.write "<p>token--->"+cstr(request.form("token"))+"<----<p>" select case token case "" call pass1 case "2" call pass2 end select %> </form> </body> </html>
***** end of file *** printed: 151 lines on: 11/23/2009 6:03:31 AM
