username.asp | searchcode

/username.asp

http://yongding.googlecode.com/
ASP | 317 lines | 303 code | 4 blank | 10 comment | 17 complexity | 61013cc0461a603131a5c0e43f7fbd3a MD5 | raw file
Possible License(s): GPL-2.0

<!--#include file="lib/utf-8.asp"-->

<!--#include file="lib/connopen.asp"-->

<!--#include file="lib/asp-common-lib.asp"-->

<!--#include file="lib/md5/md5.asp"-->

<!DOCTYPE HTML>

<html>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>???????</title>

<!--#include file="lib/plugins.asp"-->

<style type="text/css">

  .yform .type-check label {

    width: 6em;

    display: inline-block;

  }

   .subcl,.subcr,.subc {

    padding-bottom: 100em;

    margin-bottom: -100em;

  }

  h6 {

    background: #600;

    color: white;

    font-weight: bold;

    padding: 5px 10px;

  }

  #tablelist{

    font-family:??;

  }

</style>

<script type="text/javascript">

  $(function() {

    $("#form1").validationEngine();

    $("input:checked").next().next().prop("disabled",false);

    $("input[name='post']").click(function(){

      if($(this).prop("checked")){

        $(this).next().next().prop("disabled",false);

      }else{

        $(this).next().next().prop("disabled",true);

      }

    });

    /*

    $("#chkpsw").click(function(){

        var md5 = $.md5($("#password").val());

        alert($("#password").val()+':'+md5);

    });

    */

    $("#setpws").click(function(){

        $("#dv_setpws").dialog("open");

    });

    $("#dv_setpws").dialog({

      autoOpen: false,

      minHeight:200,

      modal: true,

      buttons: {

        "??": function() {

          if($("#fm_setpws").validationEngine('validate')){

            $.post("setpws.asp",{action:"??",password:$.md5($("#set_password").val()),username:$("#set_user").val(),checkpws:checkpws($("#set_password").val())},function(data){

              if(data){

                alert(data.sInfo);

                $("#dv_setpws").dialog( "close" );

              }

            },"json");

          }

        },

        "??": function() {

          $(this).dialog( "close" );

        }



      }

    });    

    

  });

</script>

<!--#include file="lib/js-google-analytics.asp"-->

</head>

<%

if not CheckPostFlag(session("aaPostFlag"),0,15) then call JumpErrorPage(2)

id=request("id")

submit=request("submit")

If submit<>"" Then

  conn.BeginTrans

  username=LCase(request("username"))

  password=lcase(md5(request("password")))

  ' response.write password

  ' response.end

  fullname=request("fullname")

  active=request("active")

  wan=request("wan")

  employee=request("employee")

  wtr=request("wtr")

  if active="" then active=false

  if wan="" then wan=false

  if employee="" then employee=false

  if submit="??" then

    sql="insert into username(username,[password],fullname,active,wan,employee,wtr) values('"&username&"','"&md5(password)&"','"&fullname&"',"&active&","&wan&","&employee&","&wtr&")"

    'response.write(sql)

    'response.end

    newuserid=ExecuteCommand(sql,true)

  end if

  if submit="??" then

    sql="update username set username='"&username&"',fullname='"&fullname&"',active="&active&",wan="&wan&",employee="&employee&",wtr="&wtr&" where id="&id

    call ExecuteCommand(sql,false)

    sql="delete * from flag where username="&id

    call ExecuteCommand(sql,false)

    newuserid=id

  end if

  for i=1 to request.form("post").count

    post=request.form("post")(i)

    flag=request.form("flag")(i)

    sql="insert into flag(username,post,flag) values("&newuserid&","&post&","&flag&")"

    call ExecuteCommand(sql,flase)

  next

  if err.number=0 then 

    conn.CommitTrans  '????conn??????????

  else

    conn.RollbackTrans '????

    '????????

    'strerr=err.Description

    url=request.ServerVariables("http_host")&request.ServerVariables("url")

    Response.Write "??????<br /><font color=red>Error # " & CStr(Err.Number) & "<br />" & Err.Description & "<br />Source: " & Err.Source &"<br />?????"&url&"</font><br />"

    Response.End

  end if



end if

if id<>"" then

  Set rs = Server.CreateObject("ADODB.Recordset")

  sql = "select * from username left join flag on username.id=flag.username where id="&id

  rs.Open sql,conn,1,1

  username=rs("username.username")

  password=rs("password")

  fullname=rs("fullname")

  active=rs("active")

  wan=rs("wan")

  employee=rs("employee")

  wtr=rs("wtr")

  aaFlag=rs.getrows(,,array("post","flag"))

  rs.close

  set rs=nothing

' else

  ' dim aaFlag(1,0)

  ' aaFlag(0,0)=null

  ' aaFlag(1,0)=null

end if

%>

<body>

<!--#include file="lib/header.asp"-->

<!--#include file="lib/nav.asp"-->

<div id="main">

<!--#include file="lib/col1.asp"-->

<!--#include file="lib/col2.asp"-->

<div id="dv_setpws" title="????">

  <form id="fm_setpws" method="post" class="yform full" role="application">

    <div class="type-text">

      <label for="set_user">???*</label>

      <input name="set_user" id="set_user" type="text" readonly="readonly" value="<%=username%>" />

    </div>

    <div class="type-text">

      <label for="set_password">????*</label>

      <input name="set_password" id="set_password" type="password" maxlength="10" class="validate[required,minSize[6],maxSize[10],custom[onlyPassword]]" />

    </div>

  </form>

</div>

  <div id="col3" role="main">

    <div id="col3_content" class="clearfix">

      <form id="form1" name="form1" method="post" class="yform" role="application">

        <div class="subcolumns equalize">

          <div class="c50l">

            <div class="subcl">

              <h6>????</h6>

              <div class="type-text">

                <label for="username">???*</label>

                <input name="username" class="validate[required,minSize[3],maxSize[10],custom[onlyUserName]]" maxlength="10" id="username" type="text" value="<%=username%>" />

              </div>

              <div class="type-text">

                <label for="password">??*</label>

                <%if id<>"" or newuserid<>"" then%>

                <button id="setpws" type="button">????</button>

                <%else%>

                <input name="password" class="validate[required,minSize[6],maxSize[10],custom[onlyPassword]]" maxlength="10" id="password" type="password" value="<%=password%>" />

                <%end if%>

              </div>

              <div class="type-text">

                <label for="fullname">??*</label>

                <input name="fullname" class="validate[required,minSize[2],maxSize[4]]" maxlength="4" id="fullname" type="text" value="<%=fullname%>" />

              </div>

              <div class="type-select">

                <label for="wtr">?????*</label>

                <select id="wtr" name="wtr">

                  <%

                    Set rs_wtr = Server.CreateObject("ADODB.Recordset")

                    sql = "SELECT * FROM wtr order by id"

                    rs_wtr.Open sql,conn,1,1

                    do while not rs_wtr.eof

                  %>

                  <option value="<%=rs_wtr("id")%>" <%if rs_wtr("id")=wtr then response.write("selected='selected'")%>><%=rs_wtr("wtr")%></option>

                  <%

                      rs_wtr.movenext

                    loop

                    rs_wtr.close

                    set rs_wtr=nothing

                  %>

                </select>

              </div>

              <div class="type-check">

                <input name="active" id="active" type="checkbox" value="true" <%if active then response.write("checked='checked'")%> />

                <label for="active">????</label>

              </div>

              <div class="type-check">

                <input name="wan" id="wan" type="checkbox" value="true" <%if wan then response.write("checked='checked'")%> />

                <label for="wan">????</label>

              </div>

              <div class="type-check">

                <input name="employee" id="employee" type="checkbox" value="true" <%if employee then response.write("checked='checked'")%> />

                <label for="employee">????</label>

              </div>

            </div>

          </div>

          <div class="c50r">

            <div class="subcr">

              <h6>????</h6>

              <%

                Set rs_post = Server.CreateObject("ADODB.Recordset")

                sql_post = "SELECT *  FROM post order by id"

                rs_post.Open sql_post,conn,1,1

                do while not rs_post.eof

              %>

              <div class="type-check">

                <input name="post" id="post<%=rs_post("id")%>" type="checkbox" value="<%=rs_post("id")%>" <%if CheckPost(aaFlag,rs_post("id")) then response.write("checked='checked'")%> />

                <label for="post<%=rs_post("id")%>"><%=rs_post("post")%></label>

                <select name="flag" disabled="disabled">

                <%

                  aAuthKey=dAuthority.keys

                  aAuthItem=dAuthority.items

                  for iAuthLoop=0 to dAuthority.count-1

                %>

                  <option value="<%=aAuthKey(iAuthLoop)%>" <%if CheckPost(aaFlag,rs_post("id")) and GetFlagValue(aaFlag,rs_post("id"))=cint(aAuthKey(iAuthLoop)) then response.write("selected")%>><%=aAuthItem(iAuthLoop)%></option>

                <%

                  next

                %>

                </select>

                <label><%=rs_post("memo")%></label>

              </div>

              <%

                  rs_post.movenext

                loop

                rs_post.close

                set rs_post=nothing

              %>

            </div>

          </div>

        </div>

        <div  class="type-button">

          <%if id="" then%>

          <input type="submit" name="submit" value="??" />

          <%end if%>

          <%if id<>"" and (id<>1 or session("sUserName")="admin") then%>

          <input type="submit" name="submit" value="??" />

          <%end if%>

        </div>

      </form>

      <table id="tablelist" class="full">

        <thead>

          <tr><th colspan="7" scope="col">????</th></tr>

        </thead>

        <tbody>

          <tr>

            <th scope="col">???</th>

            <th scope="col">??</th>

            <th scope="col">?????</th>

            <th scope="col">??</th>

            <th scope="col">????</th>

            <th scope="col">????</th>

            <th scope="col">??</th>

          </tr>

          <%

            sql = "select username.*,wtr.wtr as wtrname from username left join wtr on username.wtr=wtr.id order by wtr.id,username.username"

            Set rs = Server.CreateObject("ADODB.Recordset")

            rs.Open sql,conn,1,1

            do while not rs.eof

          %>

          <tr>

            <th class="sub" scope="row"><a href="username.asp?id=<%=rs("id")%>"><%=rs("username")%></a></th>

            <td><%=rs("fullname")%></td>

            <td><%=rs("wtrname")%></td>

            <td><%if rs("active") then response.write("??")%></td>

            <td><%if rs("wan") then response.write("?")%></td>

            <td><%if rs("employee") then response.write("?")%></td>

            <td>

            <%

              Set rs_flag = Server.CreateObject("ADODB.Recordset")

              sql_flag="SELECT post.post,flag from flag inner join post on flag.post=post.id where username="&rs("id")

              rs_flag.Open sql_flag,conn,1,1

              do while not rs_flag.eof

                response.write(FillSpace(rs_flag("post"),12)&"?"&dAuthority(cstr(rs_flag("flag")))&"<br />")

                rs_flag.movenext

              loop

              rs_flag.close

              set rs_flag=nothing

            %>

            </td>

          </tr>

          <%

              rs.movenext

            loop

            rs.close

            set rs=nothing

          %>

        </tbody>

      </table>

    </div>

  </div>

</div>

<!--#include file="lib/footer.asp"-->

</body>

</html>

<!--#include file="lib/connclose.asp"-->