pass_edit.asp

不是我做的一个留言板

<!--#include file="conn.asp" -->
<!--#include file="session.asp" -->
<!--#include file="../function/md5.asp" -->
<%
web_id="../language/"&l_id
web_id=web_id&"/CHECK.ASP"
call include(web_id)
username=session_cookie_name

dim errmsg,founderr
founderr=false
passwd=replace(trim(request.Form("oldpasswd")),"'","")
	if passwd="" then
                response.write"<Script Language=JavaScript>window.alert('"&L_USER_oldpass_JAVA&"');</Script>"
		founderr=true
log_url="memberedit.asp"
log_msg=L_USER_oldpass_JAVA

	end if

	passwd=md5(passwd)
	set rs1=server.CreateObject("adodb.recordset")
	sql1="select username,passwd from [user] where username='"&username&"' and passwd='"&passwd&"' and g_id='"&session_cookie_gid&"'"
	rs1.open sql1,conn,2,3
	if rs1.bof or rs1.eof then
    response.write"<Script Language='JavaScript'>window.alert('"&L_USER_oldpass3_JAVA&"');</Script>"
founderr=true
log_url="memberedit.asp"
log_msg=L_USER_oldpass3_JAVA
end if
newpasswd=replace(trim(request.Form("newpasswd")),"'","")
renewpasswd=replace(trim(request.Form("renewpasswd")),"'","")
	if newpasswd="" then
		
                    response.write"<Script Language='JavaScript'>window.alert('"&L_USER_newpass_JAVA&"');</Script>"
  
		founderr=true
log_url="memberedit.asp"
log_msg=L_USER_newpass_JAVA
	end if
	if renewpasswd="" then
      response.write"<Script Language='JavaScript'>window.alert('"&L_USER_repass_JAVA&"');</Script>"           
		founderr=true
log_url="memberedit.asp"
log_msg=L_USER_repass_JAVA 
	end if
	if newpasswd<>renewpasswd then
response.write"<Script Language='JavaScript'>window.alert('"&L_USER_repass3_JAVA&"!');</Script>"           
		founderr=true
log_url="memberedit.asp"
log_msg=L_USER_repass3_JAVA 
	end if
	newpasswd=md5(newpasswd)
	if founderr=false then	
log_msg=L_USER_repassok
		rs1("passwd")=newpasswd
		rs1.update
response.write"<Script Language='JavaScript'>window.alert('"&L_USER_repassok&"');</Script>"  
          
	end if 
	rs1.close
	set rs1=nothing
response.write "<br><br><br><center>"
response.write log_msg


%>