Contents of logmod.asp:
<html> <head> <script language="VBScript"> <!--- sub checkit if len(document.xform.user_id.value) < 8 OR len(document.xform.user_id.value) > 15 then msgbox "User Id must be 8 or more characters and 15 or less characters. Re-enter." exit sub end if if len(document.xform.password.value) < 8 OR len(document.xform.password.value) > 15 then msgbox "Password must be 8 or more characters and 15 or less characters. Re-enter." exit sub end if if len(document.xform.password2.value) < 8 OR len(document.xform.password2.value) > 15 then msgbox "2nd Password entered must be 8 or more characters and 15 or less characters. Re-enter." exit sub end if if len(document.xform.user_first_name.value) < 1 OR len(document.xform.user_first_name.value) > 20 then msgbox "First Name cannot be blank. Max 20 characters. Re-enter." exit sub end if if len(document.xform.user_middle_name.value) > 20 then msgbox "Middle Name cannot be greater than 20 characters. Re-enter." exit sub end if if len(document.xform.user_last_name.value) < 1 OR len(document.xform.user_last_name.value) > 20 then msgbox "Last Name cannot be blank. Max 20 characters. Re-enter." exit sub end if if document.xform.password.value <> document.xform.password2.value then msgbox "Passwords DO NOT MATCH. Re-enter." document.xform.password.value="" document.xform.password2.value="" document.xform.password.focus exit sub end if if document.xform.user_class.selectedIndex = 0 then msgbox "You must SELECT a user classification. Try Again." document.xform.user_class.focus exit sub end if document.xform.submit end sub ---> </script> </head> <body> <center> <Table border="1"> <tr><td valign='middle' bgcolor='#999999'><img src="captsm.gif"></td> <td valign='middle' bgcolor='#999999'><center><font color="#ffffff"><font face="Comic Sans MS"> <br> <b>Modify a User<br>in the Login Table</b> <br> </td></tr></table> <form name="xform" method="POST" action="logmod.asp"> <% sub pass1 %> <p> Enter User ID to Modify <input type="text" size="11" name="User_id"> <input type="hidden" name="token" value="2"> <p> <input type="submit"> <% end sub sub pass2 set rs=server.CreateObject("ADODB.Recordset") os="SELECT * FROM login WHERE user_id=" os=os+chr(39)+cstr(Request.Form("user_id"))+chr(39) 'response.write "<p>os="+os rs.open os,"DSN=gl001;UID=gl001;PWD=11111" 'response.write "<p>rs opened ok" if rs.eof then response.write "<p><b>Update cannot be processed. User Id="+cstr(request.form("user_id"))+" doesn't exist in the database!</b>" response.write "<p>Click the BACK button and re-enter a valid User Id." else %> <p> <table border="1"> <tr><td>User Id</td><td><% =rs("user_id") %></td><td></td></tr> <tr><td>Password</td><td><input type="text" name="password" size="15" maxlength="15" value="<% =rs("password") %>"></td><td>max 15 characters -- min 8 characters</td></tr> <tr><td>Re-Enter Password</td><td><input type="text" name="password2" size="15" maxlength="15"></td><td> for verification</td></tr> <tr><td>User First Name</td><td><input type="text" name="user_first_name" size="20" maxlength="20" value="<% = rs("user_first_name") %>"></td><td>You must enter a name. Max 20 characters</td></tr> <tr><td>User Middle Name</td><td><input type="text" name="user_middle_name" size="20" maxlength="20" value="<% = rs("user_middle_name") %>"></td><td>Optional. Max 20 characters</td></tr> <tr><td>User Last Name</td><td><input type="text" name="user_last_name" size="20" maxlength="20" value="<% = rs("user_last_name") %>"></td><td>You must enter a name. Max 20 characters</td></tr> <tr><td>User Classification</td><td> <select name="user_class"> <option value="">Click and SELECT ONE <% response.write "<option value='Administrator' " if rs("user_status")= "Administrator" then response.write "selected" end if response.write ">Administrator" response.write "<option value='Power User' " if rs("user_status")= "Power User" then response.write "selected" end if response.write ">Power User" response.write "<option value='Web User' " if rs("user_status")= "Web User" then response.write "selected" end if response.write ">Web User" response.write "<option value='Inactivated' " if rs("user_status")= "Inactivated" then response.write "selected" end if response.write ">Inactivated" %> </select> </td><td></td></tr> <tr><td>Creation Date</td><td><% =rs("creation_date") %></td><td></td></tr> <tr><td>IP of Creator</td><td><% =rs("ip_of_creator") %></td><td></td></tr> <tr><td>Last Modification Date</td><td><% =rs("last_mod_date") %></td><td></td></tr> <tr><td>IP of Last Modification</td><td><% =rs("ip_of_last_mod") %></td><td></td></tr> </table> <input type="hidden" name="user_id" value="<% =rs("user_id") %>"> <input type="hidden" name="token" value="3"> <P> <input type="button" onClick="checkit" value="submit"> <% end if rs.close set rs=nothing end sub sub pass3 set cn = Server.CreateObject("ADODB.Connection") fdsn="gl001" fuid="gl001" fpwd="11111" cn.open fdsn,fuid,fpwd ' response.write "cn open ok" Update_string="UPDATE login set password=" Update_string=Update_string+chr(39)+cstr(Request.Form("password"))+chr(39) Update_string=Update_string+", user_first_name="+chr(39)+cstr(Request.Form("user_first_name"))+chr(39) Update_string=Update_string+", user_middle_name="+chr(39)+cstr(Request.Form("user_middle_name"))+chr(39) Update_string=Update_string+", user_last_name="+chr(39)+cstr(Request.Form("user_last_name"))+chr(39) Update_string=Update_string+", user_status="+chr(39)+cstr(Request.Form("user_class"))+chr(39) Update_string=Update_string+", last_mod_date="+chr(39)+cstr(now)+chr(39) Update_string=Update_string+", ip_of_last_mod="+chr(39)+cstr(Request.ServerVariables("REMOTE_ADDR"))+chr(39) Update_string=Update_string+" WHERE user_id="+chr(39)+cstr(Request.Form("user_id"))+chr(39) ' response.write "<p>Update_string="+cstr(Update_string) cn.execute Update_string, numa if numa = 1 then response.write "<p><b>Updated OK" response.write "<p>Click <a href='logmod.asp'> here</a> to update another" else response.write "<p>Update failed!!<p>" response.write "<br>Likely cause is that userid="+cstr(request.Form("user_id")) + " no longer exists in the database." end if cn.close set cn=nothing end sub sub errorpass response.write cstr(request.Form("token")) end sub ' '*** top of main ' token=request.Form("token") ' response.write "<p>token--->"+cstr(request.Form("token"))+"<----<p>" select case token case "" call pass1 case "2" call pass2 case "3" call pass3 case else call errorpass end select %> </form> </body> </html>
***** end of file *** printed: 195 lines on: 11/23/2009 6:04:20 AM
