<%@LANGUAGE="VBSCRIPT"%> <% ' *** Edit Operations: declare variables MM_editAction = CStr(Request("URL")) If (Request.QueryString <> "") Then MM_editAction = MM_editAction & "?" & Request.QueryString End If ' boolean to abort record edit MM_abortEdit = false ' query string to execute MM_editQuery = "" %> <% ' *** Update Record: set variables If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then MM_editConnection = MM_directory_STRING MM_editTable = "USERS" MM_editColumn = "U_ID" MM_recordId = "'" + Request.Form("MM_recordId") + "'" MM_editRedirectUrl = "c_p.asp" MM_fieldsStr = "U_PASSWORD|value|U_FIRST|value|U_LAST|value|U_ADDRESS|value|U_CITY|value|U_STATE|value|U_ZIP|value|U_EMAIL|value|U_PHONE|value|U_FAX|value|checkbox|value" MM_columnsStr = "U_PASSWORD|',none,''|U_FIRST|',none,''|U_LAST|',none,''|U_ADDRESS|',none,''|U_CITY|',none,''|U_STATE|',none,''|U_ZIP|',none,''|U_EMAIL|',none,''|U_PHONE|',none,''|U_FAX|',none,''|email_subscribe|none,1,0" ' create the MM_fields and MM_columns arrays MM_fields = Split(MM_fieldsStr, "|") MM_columns = Split(MM_columnsStr, "|") ' set the form values For i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_fields(i+1) = CStr(Request.Form(MM_fields(i))) Next ' append the query string to the redirect URL If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString Else MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString End If End If End If %> <% ' *** Update Record: construct a sql update statement and execute it If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then ' create the sql update statement MM_editQuery = "update " & MM_editTable & " set " For i = LBound(MM_fields) To UBound(MM_fields) Step 2 FormVal = MM_fields(i+1) MM_typeArray = Split(MM_columns(i+1),",") Delim = MM_typeArray(0) If (Delim = "none") Then Delim = "" AltVal = MM_typeArray(1) If (AltVal = "none") Then AltVal = "" EmptyVal = MM_typeArray(2) If (EmptyVal = "none") Then EmptyVal = "" If (FormVal = "") Then FormVal = EmptyVal Else If (AltVal <> "") Then FormVal = AltVal ElseIf (Delim = "'") Then ' escape quotes FormVal = "'" & Replace(FormVal,"'","''") & "'" Else FormVal = Delim + FormVal + Delim End If End If If (i <> LBound(MM_fields)) Then MM_editQuery = MM_editQuery & "," End If MM_editQuery = MM_editQuery & MM_columns(i) & " = " & FormVal Next MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId If (Not MM_abortEdit) Then ' execute the update Set MM_editCmd = Server.CreateObject("ADODB.Command") MM_editCmd.ActiveConnection = MM_editConnection MM_editCmd.CommandText = MM_editQuery MM_editCmd.Execute MM_editCmd.ActiveConnection.Close If (MM_editRedirectUrl <> "") Then Response.Redirect(MM_editRedirectUrl) End If End If End If %> <% ' *** Validate request to log in to this site. MM_LoginAction = Request.ServerVariables("URL") If Request.QueryString<>"" Then MM_LoginAction = MM_LoginAction + "?" + Request.QueryString MM_valUsername=CStr(Request.Form("Username")) If MM_valUsername <> "" Then MM_fldUserAuthorization="" MM_redirectLoginSuccess="myprofile.asp" MM_redirectLoginFailed="register.asp" MM_flag="ADODB.Recordset" set MM_rsUser = Server.CreateObject(MM_flag) MM_rsUser.ActiveConnection = MM_directory_STRING MM_rsUser.Source = "SELECT U_ID, U_PASSWORD" If MM_fldUserAuthorization <> "" Then MM_rsUser.Source = MM_rsUser.Source & "," & MM_fldUserAuthorization MM_rsUser.Source = MM_rsUser.Source & " FROM USERS WHERE U_ID='" & Replace(MM_valUsername,"'","''") &"' AND U_PASSWORD='" & Replace(Request.Form("Password"),"'","''") & "'" MM_rsUser.CursorType = 0 MM_rsUser.CursorLocation = 2 MM_rsUser.LockType = 3 MM_rsUser.Open If Not MM_rsUser.EOF Or Not MM_rsUser.BOF Then ' username and password match - this is a valid user Session("MM_Username") = MM_valUsername If (MM_fldUserAuthorization <> "") Then Session("MM_UserAuthorization") = CStr(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value) Else Session("MM_UserAuthorization") = "" End If if CStr(Request.QueryString("accessdenied")) <> "" And false Then MM_redirectLoginSuccess = Request.QueryString("accessdenied") End If MM_rsUser.Close Response.Redirect(MM_redirectLoginSuccess) End If MM_rsUser.Close Response.Redirect(MM_redirectLoginFailed) End If %> <% Dim Repeat2__numRows Dim Repeat2__index Repeat2__numRows = 5 Repeat2__index = 0 SmallBanner_numRows = SmallBanner_numRows + Repeat2__numRows %> <% If Not rsUser.EOF Or Not rsUser.BOF Then %> <% End If ' end Not rsUser.EOF Or NOT rsUser.BOF %>
Home »  <%=(rsUser.Fields.Item("U_ID").Value)%>'s Profile 
<% If Not rsUser.EOF Or Not rsUser.BOF Then %> <% End If ' end Not rsUser.EOF Or NOT rsUser.BOF %>

Who are we?
  <%=(rsUser.Fields.Item("U_ID").Value)%>'s Profile 

PASSWORD: " size="35" maxlength="10" class="inputFieldIE">
FIRST: " size="35" class="inputFieldIE">
LAST: " size="35" class="inputFieldIE">
ADDRESS: " class="inputFieldIE" size="35">
CITY/TOWN: " size="35" class="inputFieldIE">
STATE/PROVINCE: " size="35" class="inputFieldIE">
ZIP/POSTAL: " size="35" class="inputFieldIE">
EMAIL: " size="35" class="inputFieldIE">
PHONE: " size="35" maxlength="15" class="inputFieldIE">
FAX: " size="35" maxlength="15" class="inputFieldIE">
RECEIVE NEWS type="checkbox" name="checkbox" value="checkbox">
 
">