yns_ursave.asp

该软件是用asp编写的

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="Connections/conn_news.asp" -->
<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers="3"
MM_authFailedURL="default.asp"
MM_grantAccess=false
If Session("MM_Username") <> "" Then
  If (false Or CStr(Session("MM_UserAuthorization"))="") Or _
         (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = "?"
  If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
  MM_referrer = Request.ServerVariables("URL")
  if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
  MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%>
<!--#include file="md5.asp" -->
<%

if(request.form("u_name") <> "") then Command1__mmname = request.form("u_name")

if(request.form("u_level") <> "") then Command1__mmlevel = request.form("u_level")

if(request.form("u_password") <> "") then Command1__mmpassword = md5(request.form("u_password"))

%>
<%
Dim rsu__MMColParam
rsu__MMColParam = "1"
If (Request.Form("u_name") <> "") Then 
  rsu__MMColParam = Request.Form("u_name")
End If
%>
<%
Dim rsu
Dim rsu_numRows

Set rsu = Server.CreateObject("ADODB.Recordset")
rsu.ActiveConnection = MM_conn_news_STRING
rsu.Source = "SELECT * FROM t_user WHERE u_name = '" + Replace(rsu__MMColParam, "'", "''") + "'"
rsu.CursorType = 0
rsu.CursorLocation = 2
rsu.LockType = 1
rsu.Open()

rsu_numRows = 0
%>
<%
If rsu.EOF And rsu.BOF Then

set Command1 = Server.CreateObject("ADODB.Command")
Command1.ActiveConnection = MM_conn_news_STRING
Command1.CommandText = "INSERT INTO t_user (u_name, u_level, u_password)  VALUES ('" + Replace(Command1__mmname, "'", "''") + "','" + Replace(Command1__mmlevel, "'", "''") + "','" + Replace(Command1__mmpassword, "'", "''") + "') "
Command1.CommandType = 1
Command1.CommandTimeout = 0
Command1.Prepared = true
Command1.Execute()

Response.Redirect "yns_user.asp"
else
Response.write"你的用户名已经有人使用了"
End If

%>
<%
rsu.Close()
Set rsu = Nothing
%>