Admin

<% if session("admin") <> "TRUE" then response.redirect("../index.asp")%> <% ' *** Edit Operations: declare variables MM_editAction = CStr(Request("URL")) If (Request.QueryString <> "") Then MM_editAction = MM_editAction & "?" & Request.QueryString End If ' boolean to abort record edit MM_abortEdit = false ' query string to execute MM_editQuery = "" %> <% ' *** Insert Record: set variables If (CStr(Request("MM_insert")) <> "") Then MM_editConnection = MM_workspace_forum_STRING MM_editTable = "FORUM_MEMBERS" MM_editRedirectUrl = "../wsadmin/thanks.asp?action=newUser" 'response.write("") MM_fieldsStr = "username|value|password|value|firstname|value|lastname|value|email|value" MM_columnsStr = "M_NAME|',none,''|M_PASSWORD|',none,''|M_FIRSTNAME|',none,''|M_LASTNAME|',none,''|M_EMAIL|',none,''" ' create the MM_fields and MM_columns arrays MM_fields = Split(MM_fieldsStr, "|") MM_columns = Split(MM_columnsStr, "|") ' set the form values For i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_fields(i+1) = CStr(Request.Form(MM_fields(i))) Next ' append the query string to the redirect URL If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString Else MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString End If End If End If %> <% ' *** Insert Record: construct a sql insert statement and execute it If (CStr(Request("MM_insert")) <> "") Then ' create the sql insert statement MM_tableValues = "" MM_dbValues = "" For i = LBound(MM_fields) To UBound(MM_fields) Step 2 FormVal = MM_fields(i+1) MM_typeArray = Split(MM_columns(i+1),",") Delim = MM_typeArray(0) If (Delim = "none") Then Delim = "" AltVal = MM_typeArray(1) If (AltVal = "none") Then AltVal = "" EmptyVal = MM_typeArray(2) If (EmptyVal = "none") Then EmptyVal = "" If (FormVal = "") Then FormVal = EmptyVal Else If (AltVal <> "") Then FormVal = AltVal ElseIf (Delim = "'") Then ' escape quotes FormVal = "'" & Replace(FormVal,"'","''") & "'" Else FormVal = Delim + FormVal + Delim End If End If If (i <> LBound(MM_fields)) Then MM_tableValues = MM_tableValues & "," MM_dbValues = MM_dbValues & "," End if MM_tableValues = MM_tableValues & MM_columns(i) MM_dbValues = MM_dbValues & FormVal Next MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")" If (Not MM_abortEdit) Then ' execute the insert Set MM_editCmd = Server.CreateObject("ADODB.Command") MM_editCmd.ActiveConnection = MM_editConnection MM_editCmd.CommandText = MM_editQuery MM_editCmd.Execute MM_editCmd.ActiveConnection.Close 'Send Mail fromAdd = workspaceWebmasterEmail fromName = workspaceWebmasterName toAdd = request.querystring("email") 'response.write("toAdd=" & toAdd) toName = request.querystring("firstname") 'response.write("toName=" & toName) mySubject = "Your BT Interface " & workspaceName & " Account details" myBody = "You have recieved this message because a BT Interface " & workspaceName & " account has been set up in your name." & Chr(13) & Chr(10) & Chr(13) & Chr(10) & _ "Your details are as follows:" & Chr(13) & Chr(10) & _ "username = " & request.querystring("username") & Chr(13) & Chr(10) & _ "password = " & request.querystring("password") & Chr(13) & Chr(10) & _ "URL = http://www.btinterface.co.uk/workspace/" & workspaceURL & "/" & Chr(13) & Chr(10) & Chr(13) & Chr(10) & _ "Regards" & Chr(13) & Chr(10) & _ workspaceWebmasterEmail Set Mail = Server.CreateObject("Persits.MailSender") Mail.Host = workspaceSMTP ' Specify a valid SMTP server Mail.From = fromAdd ' Specify sender's address Mail.FromName = fromName ' Specify sender's name Mail.AddAddress toAdd, toName Mail.AddReplyTo fromAdd Mail.Subject = mySubject Mail.Body = myBody On Error Resume Next Mail.Send If Err <> 0 Then Response.Write "Error encountered: " & Err.Description & "" End If If (MM_editRedirectUrl <> "") Then Response.Redirect(MM_editRedirectUrl) End If End If End If %> Admin