<% '################################################################################# '## Copyright (C) 2000 Michael Anderson '## '## This program is free software; you can redistribute it and/or '## modify it under the terms of the GNU General Public License '## as published by the Free Software Foundation; either version 2 '## of the License, or any later version. '## '## This program is distributed in the hope that it will be useful, '## but WITHOUT ANY WARRANTY; without even the implied warranty of '## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the '## GNU General Public License for more details. '## '## You should have received a copy of the GNU General Public License '## along with this program; if not, write to the Free Software '## Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. '## '## Correspondence and Questions can be sent to: '## reinhold@bigfoot.com '## '## or '## '## Snitz Communications '## C/O: Michael Anderson '## PO Box 200 '## Harpswell, ME 04079 '## '## Version 08/14/2000 '## '################################################################################# %> <% if strAuthType = "nt" then if ChkAccountReg() <> "1" then %>

Note: This NT account has not been registered yet, thus the profile is not available.
If this is your account, click here to register.

<% Response.End end if end if %> <% select case Request.QueryString("mode") case "display" '## Display Profile '## Forum_SQL strSql = "SELECT " & strMemberTablePrefix & "MEMBERS.MEMBER_ID, " & strMemberTablePrefix & "MEMBERS.M_NAME, " & strMemberTablePrefix & "MEMBERS.M_USERNAME, " & strMemberTablePrefix & "MEMBERS.M_EMAIL " if strICQ = "1" then strSql = strSql & ", " & strMemberTablePrefix & "MEMBERS.M_ICQ" end if if strYAHOO = "1" then strSql = strSql & ", " & strMemberTablePrefix & "MEMBERS.M_YAHOO" end if if strAIM = "1" then strSql = strSql & ", " & strMemberTablePrefix & "MEMBERS.M_AIM" end if if strHomepage = "1" then strSql = strSql & ", " & strMemberTablePrefix & "MEMBERS.M_HOMEPAGE" end if strSql = strSql & ", " & strMemberTablePrefix & "MEMBERS.M_COUNTRY, " & strMemberTablePrefix & "MEMBERS.M_POSTS" strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " WHERE MEMBER_ID=" & Request.QueryString("id") set rs = my_Conn.Execute(strSql) %>

User Profile

<% if strAuthType = "nt" then %> <% end if %> <% if strICQ = "1" then %> <% if rs("M_ICQ") <> " " then %> <% end if %> <% end if %> <% if strYAHOO = "1" then %> <% if rs("M_YAHOO") <> " " then %> <% end if %> <% end if %> <% if strAIM = "1" then %> <% if rs("M_AIM") <> " " then %> <% end if %> <% end if %> <% if strHomepage = "1" then %> <% if rs("M_HOMEPAGE") <> " " then %> <% end if %> <% end if %> <% if rs("M_COUNTRY") <> " " then %> <% end if %>
align=right nowrap>User Name: ><% =rs("M_NAME") %> 
Your Account: <%=rs("M_USERNAME")%>
align=right nowrap>Email Address: >"><% =rs("M_EMAIL") %> 
align=right nowrap>ICQ: >&M_NAME=<% =rs("M_NAME") %>">&img=5" border="0" align="absmiddle"><% =rs("M_ICQ") %> 
align=right nowrap>YAHOO IM: >&.src=pg">&m=g&t=2"> 
align=right nowrap>AIM: >&M_NAME=<% =rs("M_NAME") %>"><% =rs("M_AIM") %> 
align=right nowrap>Home Page: >" target="_Blank"><% =rs("M_Homepage") %> 
align=right nowrap>Country: ><% =rs("M_COUNTRY") %> 
align=right nowrap>Total Posts: ><% =rs("M_POSTS") %> 
<% case "Edit" %>

User Profile

" method="post"> It is up to you to keep your profile up to date.
<% if strAuthType = "nt" then %> Your NT account is shown. Click Submit to carry on.

<% else %> <% if strAuthType = "db" then %> Please Fill the Form in with your details.

<% end if %> <% end if %> If you have not registered then do so here.
<% if strAuthType = "nt" then %> <% else %> <% if strAuthType = "db" then %> <% end if %> <% end if %>
Your Account: <% =Session("userid") %>
align=right nowrap>User Name: >">
align=right nowrap>Password: >">
align=center colspan=2>

<% case "goEdit" '## Forum_SQL 'strSql = "SELECT * FROM " & strMemberTablePrefix & "MEMBERS " strSql = "SELECT " & strMemberTablePrefix & "MEMBERS.MEMBER_ID, " & strMemberTablePrefix & "MEMBERS.M_NAME, " & strMemberTablePrefix & "MEMBERS.M_PASSWORD, " strSql = strSql & strMemberTablePrefix & "MEMBERS.M_EMAIL, " & strMemberTablePrefix & "MEMBERS.M_ICQ, " & strMemberTablePrefix & "MEMBERS.M_YAHOO, " & strMemberTablePrefix & "MEMBERS.M_AIM, " strSql = strSql & strMemberTablePrefix & "MEMBERS.M_HOMEPAGE, " & strMemberTablePrefix & "MEMBERS.M_COUNTRY, " & strMemberTablePrefix & "MEMBERS.M_SIG " strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS " if strAuthType = "nt" then strSql = strSql & " WHERE M_USERNAME = '" & session("userid") & "'" QuoteOk = ChkQuoteOk(session("userid")) else if strAuthType = "db" then strSql = strSql & " WHERE M_NAME = '" & ChkString(Request.Form("Name"),"name") & "' " strSql = strSql & " AND M_PASSWORD = '" & ChkString(Request.Form("Password"),"password") & "'" QuoteOk = (ChkQuoteOk(Request.Form("UserName")) and ChkQuoteOk(Request.Form("Password"))) end if end if set rs = my_Conn.Execute(strSql) if rs.BOF and rs.EOF and QuoteOk then %>

Invalid UserName or Password

Go Back To Retry

<% Response.End else '## Display Edit Profile Page %>

Edit User Profile

" method="Post" id=Form1 name=Form1>

<% end if case "Modify" %>

Modify Member

NOTE: Only Administrators can Modify a Member.

"> "> ">
align=right nowrap>User Name: >" size=20>
align=right nowrap>Password: >" size=20>
colspan=2 align=center>
<% case "goModify" mLev = cint(ChkUser2(Request.Form("User"), Request.Form("Pass"))) if mLev > 0 then '## is Member if mLev = 4 then '## Forum_SQL strSql = "SELECT " & strMemberTablePrefix & "MEMBERS.MEMBER_ID, " & strMemberTablePrefix & "MEMBERS.M_NAME, " & strMemberTablePrefix & "MEMBERS.M_PASSWORD, " & strMemberTablePrefix & "MEMBERS.M_EMAIL, " & strMemberTablePrefix & "MEMBERS.M_TITLE, " strSql = strSQL & strMemberTablePrefix & "MEMBERS.M_POSTS, " & strMemberTablePrefix & "MEMBERS.M_ICQ, " & strMemberTablePrefix & "MEMBERS.M_YAHOO, " & strMemberTablePrefix & "MEMBERS.M_AIM, " & strMemberTablePrefix & "MEMBERS.M_HOMEPAGE, " strSql = strSQL & strMemberTablePrefix & "MEMBERS.M_COUNTRY, " & strMemberTablePrefix & "MEMBERS.M_SIG, " & strMemberTablePrefix & "MEMBERS.M_LEVEL" strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " WHERE MEMBER_ID = " & Request.Form("MEMBER_ID") 'strSql = "SELECT * FROM " & strMemberTablePrefix & "MEMBERS " 'strSql = strSql & " WHERE MEMBER_ID = " & Request.Form("MEMBER_ID") set rs = my_Conn.Execute(strSql) '## Display Edit Profile Page %>

Modify User Profile

" method="Post" id=Form1 name=Form1> "> ">

<% else %>

No Permissions to Modify a Member

Go Back to Re-Authenticate

<% end if %> <% else %>

No Permissions to Modify a Member

Go Back to Re-Authenticate

<% end if %> <% case "EditIt" Err_Msg = "" if Request.Form("Name") = "" then Err_Msg = Err_Msg & "
  • You must choose a UserName
    • " end if if strAuthType = "db" then if Request.Form("Password") = "" then Err_Msg = Err_Msg & "
  • You must choose a Password
    • " end if if Len(Request.Form("Password")) > 25 then Err_Msg = Err_Msg & "
  • Your Password can not be greater than 25 characters
    • " end if if Request.Form("Password") <> Request.Form("Password2") then Err_Msg = Err_Msg & "
  • Your Passwords didn't match.
    • " end if end if if Request.Form("Email") = "" then Err_Msg = Err_Msg & "
  • You Must give an email address
    • " end if if EmailField(Request.Form("Email")) = 0 then Err_Msg = Err_Msg & "
  • You Must enter a valid email address
    • " end if if (lcase(left(Request.Form("Homepage"), 7)) <> "http://") and (lcase(left(Request.Form("Homepage"), 8)) <> "https://") and (Request.Form("Homepage") <> "") then Err_Msg = Err_Msg & "
  • You Must prefix your URL with http:// or https://
    • " end if if strUniqueEmail = "1" then if lcase(Request.Form("Email")) <> lcase(Request.Form("Email2")) then '## Forum_SQL strSql = "SELECT M_EMAIL FROM " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " WHERE M_EMAIL = '" & Request.Form("Email") &"'" set rs = my_Conn.Execute (strSql) if rs.BOF and rs.EOF then '## Do Nothing - proceed Else Err_Msg = Err_Msg & "
  • Email Address already in use, Please Choose Another
    • " end if rs.close set rs = nothing end if end if if Len(Request.Form("Sig")) > 255 then Err_Msg = Err_Msg & "
  • Your signature can not be greater than 255 characters
    • " end if if Err_Msg = "" then if Request.Form("Homepage") <> "" and lcase(Request.Form("Homepage")) <> "http://" and lcase(Request.Form("Homepage")) <> "https://" then regHomepage = ChkString(Request.Form("Homepage"),"url") else regHomepage = " " end if '## Forum_SQL strSql = "UPDATE " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " SET M_PASSWORD = '" & ChkString(Request.Form("Password"),"") & "', " strSql = strSql & " M_COUNTRY = '" & ChkString(Request.Form("Country"),"") & "', " if strICQ = "1" then strSql = strSql & " M_ICQ = '" & ChkString(Request.Form("ICQ"),"") & "', " end if if strYAHOO = "1" then strSql = strSql & " M_YAHOO = '" & ChkString(Request.Form("YAHOO"),"") & "', " end if if strAIM = "1" then strSql = strSql & " M_AIM = '" & ChkString(Request.Form("AIM"),"") & "', " end if if strHOMEPAGE = "1" then strSql = strSql & " M_Homepage = '" & ChkString(Trim(regHomepage),"") & "', " end if strSql = strSql & " M_SIG = '" & ChkString(Request.Form("Sig"),"message") & "', " strSql = strSql & " M_EMAIL = '" & ChkString(Request.Form("Email"),"") & "' " strSql = strSql & " WHERE M_NAME = '" & Request.Form("Name") & "' " strSql = strSql & " AND M_PASSWORD = '" & Request.Form("Password-d") & "'" my_Conn.Execute(strSql) regHomepage = "" %>

    Profile Updated.

    <% else %>

    There Was A Problem With Your Details

      <% =Err_Msg %>

    Go Back To Enter Data

    Close Window

    <% Response.End end if case "ModifyIt" mLev = cint(ChkUser2(Request.Form("User"), Request.Form("Pass"))) if mLev > 0 then '## is Member if mLev = 4 then '## Forum_SQL strSql = "UPDATE " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " SET M_NAME = '" & ChkString(Request.Form("Name"),"name") & "'" if strAuthType = "nt" then strSql = strSql & ", M_USERNAME = '" & ChkString(Request.Form("Account"),"") & "'" else if strAuthType = "db" then strSql = strSql & ", M_PASSWORD = '" & ChkString(Request.Form("Password"),"") & "'" end if end if strSql = strSql & ", M_EMAIL = '" & ChkString(Request.Form("Email"),"") & "'" strSql = strSql & ", M_TITLE = '" & ChkString(Request.Form("Title"),"") & "'" strSql = strSql & ", M_POSTS = '" & ChkString(Request.Form("Posts"),"") & "'" strSql = strSql & ", M_COUNTRY = '" & ChkString(Request.Form("Country"),"") & "'" if strICQ = "1" then strSql = strSql & ", M_ICQ = '" & ChkString(Request.Form("ICQ"),"") & "'" end if if strYAHOO = "1" then strSql = strSql & ", M_YAHOO = '" & ChkString(Request.Form("YAHOO"),"") & "'" end if if strAIM = "1" then strSql = strSql & ", M_AIM = '" & ChkString(Request.Form("AIM"),"name") & "'" end if if strHOMEPAGE = "1" then strSql = strSql & ", M_Homepage = '" & ChkString(Request.Form("Homepage"),"" ) & "'" end if strSql = strSql & ", M_SIG = '" & ChkString(Request.Form("Sig"),"message") & "'" strSql = strSql & ", M_LEVEL = " & ChkString(Request.Form("Level"),"") strSql = strSql & " WHERE MEMBER_ID = " & Request.Form("MEMBER_ID") my_Conn.Execute(strSql) %>

    Profile Updated.

    <% else %>

    No Permissions to Modify a Member

    Go Back to Re-Authenticate

    <% end if %> <% else %>

    No Permissions to Modify a Member

    Go Back to Re-Authenticate

    <% end if %> <% end select %> <% on error resume next %> <% rs.close %> <% set rs=nothing %>