register.asp

电子商务网络购物系统

                strmistWord = rsConn("mist")
                strmistWordReplace = rsConn("okworld")
                If strMode = "new" Then strUsername = Replace(strUsername, strmistWord, strmistWordReplace, 1, -1, 1)
                strRealName = Replace(strRealName, strmistWord, strmistWordReplace, 1, -1, 1)
                strSignature = Replace(strSignature, strmistWord, strmistWordReplace, 1, -1, 1)
                strAIMAddress = Replace(strAIMAddress, strmistWord, strmistWordReplace, 1, -1, 1)
                strMSNAddress = Replace(strMSNAddress, strmistWord, strmistWordReplace, 1, -1, 1)
                strYahooAddress = Replace(strYahooAddress, strmistWord, strmistWordReplace, 1, -1, 1)
                strjob = Replace(strjob, strmistWord, strmistWordReplace, 1, -1, 1)
                strInterests = Replace(strInterests, strmistWord, strmistWordReplace, 1, -1, 1)
                rsConn.MoveNext
        Loop
        rsConn.Close
        If strMode = "new" Then
                If blnUsernameOK = True Then
                        strSQL = "SELECT timesuser.Username FROM timesuser WHERE timesuser.Username = '" & strUsername & "';"
                        rsConn.Open strSQL, adoCon
                        If NOT rsConn.EOF Then blnUsernameOK = False
                        rsConn.Close
                        strUsername = Replace(strUsername, "''", "'", 1, -1, 1)
                        strSQL = "SELECT timesgrp.grpid FROM timesgrp WHERE timesgrp.startgrp = true;"
                        rsConn.Open strSQL, adoCon
                        intForumStartingGroup = CInt(rsConn("grpid"))
                        rsConn.Close
                End If
                strSQL = "SELECT timesfilter.Email FROM timesfilter WHERE timesfilter.Email Is Not Null;"
                rsConn.Open strSQL, adoCon
                Do while NOT rsConn.EOF
                        strCheckEmailAddress = rsConn("Email")
                        If Instr(1, strCheckEmailAddress, "*", 1) > 0 Then
	                        strCheckEmailAddress = Replace(strCheckEmailAddress, "*", "", 1, -1, 1)
	                        strCheckEmailAddress = formatLink(strCheckEmailAddress)
	        		strCheckEmailAddress = formatInput(strCheckEmailAddress)
	                        If InStr(1, strEmail, strCheckEmailAddress, 1) Then blnEmailBlocked = True
	                Else
	                        strCheckEmailAddress = formatLink(strCheckEmailAddress)
	        		strCheckEmailAddress = formatInput(strCheckEmailAddress)
	                        If strCheckEmailAddress = strEmail Then blnEmailBlocked = True
	        	End If
                        rsConn.MoveNext
                Loop
                rsConn.Close
                If blnEmailActivation = True Then
                        strEmail = formatSQLInput(strEmail)
                        strSQL = "SELECT timesuser.useremail FROM timesuser WHERE timesuser.useremail = '" & strEmail & "';"
                        rsConn.Open strSQL, adoCon
                        If NOT rsConn.EOF Then blnEmailOK = False
                        rsConn.Close
                        strEmail = Replace(strEmail, "''", "'", 1, -1, 1)
                End If
                strUserCode = userCode(strUsername)
        ElseIf blnAdminMode = False Then
                strUserCode = userCode(strLoggedInUsername)

        End If
	        strSQL = "SELECT timesuser.* "
	        strSQL = strSQL & "FROM timesuser "
	        strSQL = strSQL & "WHERE timesuser.userid = " & lngUserProfileID
        rsConn.CursorType = 2
        rsConn.LockType = 3
        rsConn.Open strSQL, adoCon
        If NOT rsConn.EOF AND blnAdminMode Then
        	strUserCode = rsConn("usercode")
        	If blnUserActive = False AND InStr(1, strUserCode, "N0act", vbTextCompare) = False Then
        	 	strUserCode = strUserCode & "N0act"
        	ElseIf blnUserActive Then
        		strUserCode = Replace(strUserCode, "N0act", "", 1, -1, 1)
        	End If
        End If
        If strMode = "update" AND blnAdminMode AND blnModerator AND NOT rsConn.EOF Then
                If CInt(rsConn("grpid")) = 1 Then
                        Set rsConn = Nothing
			adoCon.Close
			Set adoCon = Nothing
                        Response.Redirect("nopermission.asp?fid=" & intForumID)
                End If
        End If
        If strPassword <> "" Then
                If strMode = "new" Then
                        strSalt = getSalt(Len(strPassword))
                Else
                        strSalt = rsConn("Salt")
                End If
                strEncyptedPassword = strPassword & strSalt
                strEncyptedPassword = HashEncode(strEncyptedPassword)
        End If
        If strMode = "update" AND strPassword <> "" Then
                If rsConn("Password") <> strEncyptedPassword Then
                        strSalt = getSalt(Len(strPassword))
                        strEncyptedPassword = strPassword & strSalt
                        strEncyptedPassword = HashEncode(strEncyptedPassword)
                        blnPasswordChange = True
                End If
        End If
        If blnEmailActivation = True AND blnAdmin = False AND strMode = "update" Then
                If rsConn("useremail") <> strEmail Then blnAccountReactivate = True
        End If
        If (strMode = "new" AND blnUsernameOK = True AND blnEmailOK = True AND blnEmailBlocked = False) OR strMode = "update" Then
                If strMode = "new" Then rsConn.AddNew
                With rsConn
                        If strMode = "new" Then .Fields("Username") = strUsername
                        If (strMode = "update" AND blnPasswordChange = True) OR  strMode = "new" Then .Fields("Password") = strEncyptedPassword
                        If (strMode = "update" AND blnPasswordChange = True) OR  strMode = "new" Then .Fields("Salt") = strSalt
                        .Fields("usercode") = strUserCode
                        If strMode = "new" Then .Fields("grpid") = intForumStartingGroup
                        .Fields("useremail") = strEmail
                        .Fields("disemail") = blnShowEmail
                        .Fields("Homepage") = strHomepage
                        .Fields("realname") = strRealName
                        .Fields("Location") = strLocation
                        .Fields("Signature") = strSignature
                        .Fields("Avatar") = strAvatar
                        .Fields("dtfmt") = strDateFormat
                        .Fields("tmset") = strTimeOffSet
                        .Fields("tmhour") = intTimeOffSet
                        .Fields("replynotify") = blnReplyNotify
                        .Fields("attachsign") = blnAttachSignature
                        .Fields("richedit") = blnWYsiWYGEditor
                        .Fields("ICQ") = strICQNum
                        .Fields("AIM") = strAIMAddress
                        .Fields("MSN") = strMSNAddress
                        .Fields("Yahoo") = strYahooAddress
                        .Fields("job") = strjob
                        .Fields("Interests") = strInterests
                        .Fields("DOB") = dtmDateOfBirth
                        .Fields("messnotify") = blnPMNotify
                        If ((blnEmailActivation = True AND strMode = "new") OR blnAccountReactivate = True) AND blnModerator = False Then
                                .Fields("Active") = 0
                        Else
                                .Fields("Active") = 1
                        End If
                        If blnAdminMode AND (blnAdmin Or blnModerator) AND strMode = "update" Then
                        	If lngUserProfileID > 2 Then .Fields("Active") = blnUserActive
                        	.Fields("rank") = strMemberTitle
				If isEmpty(lngPosts) = False Then .Fields("postnum") = lngPosts
                        	If blnAdmin AND lngUserProfileID > 2 Then
                        		.Fields("grpid") = intUsersGroupID
                		End If
                        End If
                        .Update
                        .Requery
                End With
                If blnAdminMode = False Then
                        Response.Cookies("Forum")("UID") = strUserCode
                        If blnAutoLogin = True Then
                                Response.Cookies("Forum").Expires = Now() + 365
                        End If
                End If
                strSubject = "欢迎! 来到 " & strMainForumName
                If (blnEmailActivation = True AND strMode = "new") OR blnAccountReactivate = True Then
                        strEmailBody = "Hi" & " " & decodeString(strUsername)
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & "谢谢您的注册" & " " & strMainForumName & "."
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & "用户名" & ":" & decodeString(strUsername)
                        strEmailBody = strEmailBody & vbCrLf & "密码" & ":" & strPassword
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & "点击下面的链接激活你在" & " " & strMainForumName & " 的帐号:"
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & strForumPath & "/activate.asp?ID=" & Server.URLEncode(strUserCode)
                        blnSentEmail = SendMail(strEmailBody, decodeString(strUsername), decodeString(strEmail), strMainForumName, decodeString(strForumEmailAddress), strSubject, strMailComponent, false)
                        rsConn.Close
                        Set rsConn = Nothing
			adoCon.Close
			Set adoCon = Nothing
                        If blnAccountReactivate = True Then
                                Response.Redirect("registerchk.asp?TP=REACT&fid=" & intForumID)
                        Else
                                Response.Redirect("registerchk.asp?TP=ACT&fid=" & intForumID)
                        End If
                ElseIf blnEmail = True AND strEmail <> "" AND strMode = "new" Then
                        strEmailBody = "Hi" & " " & decodeString(strUsername)
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & "谢谢您的注册" & " " & strMainForumName & "."
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & "你的注册信息在下面,你注册了一个新帐号,已经可以在" & " " & strWebsiteName & " 发表新贴子或者回复别人的贴子，论坛地址: " & strForumPath
                        strEmailBody = strEmailBody & vbCrLf & vbCrLf & "用户名" & ":" & strUsername
                        strEmailBody = strEmailBody & vbCrLf & "密码" & ":" & decodeString(strPassword)
                        blnSentEmail = SendMail(strEmailBody, decodeString(strUsername), decodeString(strEmail), strMainForumName, decodeString(strForumEmailAddress), strSubject, strMailComponent, false)
                End If
                rsConn.Close
                Set rsConn = Nothing
		adoCon.Close
		Set adoCon = Nothing
                If strMode = "new" Then
                        Response.Redirect("registerchk.asp?TP=NEW&fid=" & intForumID)
                Else
                        Response.Redirect("registerchk.asp?TP=UPD&fid=" & intForumID)
                End If
        End If
End If
If strMode = "reg" OR strMode = "new" Then
        strMode = "new"
Else
        strMode = "update"
End If
If strMode = "update" Then
	        strSQL = "SELECT timesuser.* "
	        strSQL = strSQL & "FROM timesuser "