user_public.asp

红金羚v1.5办公自动化软件是基于大型数据库系统开发的应用系统

<%@ LANGUAGE = VBScript %>
<!-- #include file="utils.asp" -->
<%check_security(1)%>
<%
' Users: 
	' user_id: int identity|int: 4
	' user_type_id: smallint: 2
	' user_name: text|varchar: 50
	' f_name: text|varchar: 50
	' l_name: text|varchar: 70
	' email: text|varchar: 60
	' password: text|varchar: 50
	' addr1: text|varchar: 100
	' addr2: text|varchar: 50
	' city: text|varchar: 50
	' state: text|varchar: 50
	' postalcode: text|varchar: 50
	' country: text|varchar: 50
	' phone: text|varchar: 50
	' fax: text|varchar: 50
	' notes: longtext|memo: 536870910
	' selfemp: byte: 1
	' dtInserted: datetime: 8
	' dtModified: datetime: 8
	' accesslevel: int identity|int: 4
	' mailing_list: byte: 1
	' util_val: int identity|int: 4
	' util_flag: byte: 1
	' account_no: text|varchar: 40
	' homepage_url: text|varchar: 70
	' signature: text|varchar: 255
	' image: text|varchar: 50
	' refered_by: text|varchar: 30


dim user_id
dim user_name
dim email
dim f_name
dim l_name
dim image
dim country
dim dtInserted
dim view_users_sql
sub request_view_users
''' request form inputs from this form
	user_id = request("user_id")
	user_name = request("user_name")
	email = request("email")
	l_name = request("l_name")
	image = request("image")
	dtInserted = request("dtInserted")
end sub

sub validate_view_users
''' request and validate data entered from this form
	user_id = trim(request("user_id"))
	user_name = trim(request("user_name"))
	email = trim(request("email"))
	l_name = trim(request("l_name"))
	image = trim(request("image"))
	dtInserted = trim(request("dtInserted"))
	if dtInserted <> "" AND (not isdate(dtInserted)) then
		error_list.add "589339date","创建日期的输入格式应当为（MM/DD/YY）"
		b_error = true
	end if
end sub


sub db_select_view_Users
	sql = "SELECT " & _ 
	"user_id, " & _ 
	"user_name, " & _ 
	"email, " & _ 
	"l_name, " & _ 
	"image, " & _ 
	"dtInserted FROM Users" & _ 
	" WHERE " & _ 
	"Users.user_id = " & to_sql(user_id,"number") & ""
	on error resume next
	set rs = cn.Execute(sql)
	if err.number <> 0 then
		b_error = true
	elseif rs.EOF then
		b_results = false
	else
		user_id = rs("user_id")
		user_name = rs("user_name")
		email = rs("email")
		l_name = rs("l_name")
		image = rs("image")
		dtInserted = rs("dtInserted")
	end if
	rs.Close
	on error goto 0
end sub
sub db_insert_view_Users
	sql = "INSERT INTO Users" & _ 
	"(" & _ 
	"user_name," & _ 
	"email," & _ 
	"l_name," & _ 
	"image," & _ 
	"dtInserted" & _ 
	") VALUES (" & to_sql(user_name,"text") & "," & _ 
	"" & to_sql(email,"text") & "," & _ 
	"" & to_sql(l_name,"text") & "," & _ 
	"" & to_sql(image,"text") & "," & _ 
	"" & to_sql(dtInserted,"text") & ")" & _ 
	""
	'response.write sql
	on error resume next
	cn.Execute(sql)
	if err.Number <> 0 then
		b_error = true
	else
		set rs = cn.Execute("SELECT @@IDENTITY")
		user_id = rs(0)
		rs.Close
	end if
	on error goto 0
end sub
sub db_update_view_Users
	sql = "UPDATE Users SET " & _ 
	"user_name = " & to_sql(user_name,"text") & ", " & _ 
	"email = " & to_sql(email,"text") & ", " & _ 
	"l_name = " & to_sql(l_name,"text") & ", " & _ 
	"image = " & to_sql(image,"text") & ", " & _ 
	"dtInserted = " & to_sql(dtInserted,"text") & " WHERE " & _ 
	"user_id = " & to_sql(user_id,"number") & ""
	'response.write sql
	on error resume next
	cn.execute(sql)
	if err.number <> 0 then
		b_error = true
	end if
	on error goto 0
end sub
sub db_delete_view_Users
	sql = "DELETE FROM Users" & _ 
	" WHERE " & _ 
	"user_id = " & to_sql(user_id,"number") & ""
	'response.write sql
	on error resume next
	cn.Execute(sql)
	if err.number <> 0 then
		b_error = true
	end if
	on error goto 0
end sub

do_search = request("do_search")
''' request form keys and inputs
user_id = request("user_id")

':: request action
action = lcase(request("action"))

':: handle the action
select case action

case "select_view_users"
'  select the requested key record from database
if user_id <> "" then
	db_select_view_Users
else
	b_error = true
	error_list.add "edit_view_Users", "没有指定要查找的记录！"
end if


case "insert_view_users"
'  request form data and insert a new record into database

validate_view_users
if not b_error then
	db_insert_view_users
end if



case "update_view_users"
'  request form data and update an existing database record
validate_view_users
if not b_error then
if user_id <> "" then
	db_update_view_users
else
	b_error = true
	error_list.add "update_view_users", "没有指定要更新的记录！"
end if
end if


case "delete_view_users"
'  delete the requested key database record
if user_id <> "" then
	db_delete_view_users
	response.redirect request.servervariables("script_name") & "?msg=记录已被删除！"
else
	b_error = true
	error_list.add "delete_view_users", "没有指定要删除的记录！"
end if


end select

':: handle the default case(s) (ignores value of action parameter)
if user_id <> "" then
	db_select_view_Users
end if
%>
<%
display_errs
display_msg
%>

<link rel="stylesheet" href="vos.css" type="text/css">
<br><br>
<%

':: check if hide form var was set
if not b_hide_view_Users then
%>

<table class='headerTable'>
<tr>
    <td class='headerTD'> <A href='user_public.asp'>用户资料</A> </td>
</tr>
</table>
<table  >
<form id="view_Users" name="view_Users" action="" method="get" >
		
		<input type=hidden name="user_id" value="<%=user_id %>">
		
<tr>
	  <td class='labelTD'>用户名称</td>
	<td class='dataTD' width='75%'>
		<%=user_name %>
	</td>
</tr>
<tr>
	  <td class='labelTD'>电子信箱</td>
	<td class='dataTD' >
		<a href="mailto:<%=email %>"><%=email %></a>
	</td>
</tr>
<tr>
	  <td class='labelTD'>姓名</td>
	<td class='dataTD' >
		<%=l_name %>
	</td>
</tr>
<tr>
	<td class='labelTD'></td>
	<td class='dataTD' >
			<img  name="image" src="<%=image %>">
	</td>
</tr>
<tr>
	  <td class='labelTD'>注册日期</td>
	<td class='dataTD' >
		<%=dtInserted %>
	</td>
</tr>

</form>
</table>
<%

':: end hide form if
end if
%>
<br><br>
<%
':: assure that any db resources are freed
on error resume next
rs.Close
set rs = NOTHING
cn.Close
set cn = NOTHING
user_cn.Close
set user_cn = NOTHING
on error goto 0
%>