xgzl.asp

一般的,简单的的的的的的的的饿的饿恶毒 一般的,简单的的的的的的的的饿的饿恶毒 一般的,简单的的 的的 饿的饿恶毒

<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<!--#include file="conn.asp"-->
<%
dim alert,over

alert="<Script language='javascript'>alert('注册信息提交过程中发生严重错误！请返回重新填写表单！');history.back(1);</Script>"
over="<script language='javascript'>alert('注册信息已经成功提交！\n感谢您注册成为本站会员！\n请返回首页登陆！');self.location=('index.asp');</script>"

function zf(key)
	k=len(key)
	for i=1 to k
		infos=mid(key,i,1)
		s=instr("?><~/.,';][\=-`!@#$%^&*()_+|}{:'"&chr(34),infos)
		if s>0 then
			rs=""
			response.write(alert)
			exit for
		else
			rs=key
		end if
	next
	zf=rs
end function

function updateform(sss)
sss=replace(sss,chr(10),"<br>")
sss=replace(sss,"	","&nbsp;&nbsp;&nbsp;")
		updateform=sss
end function

username=request.form("username")
if username<>"" then
username=zf(username)
end if

userpass=request.form("userpass")

sex=request.form("sex")

email=request.form("email")

tools=request.form("tools")

numbers=request.form("numbers")
	if numbers<>"" then
		QQ=tools&numbers
	else
		QQ="无"
	end if
	
userpage=request.form("userpage")

if userpage<>"" then
userpage=updateform(userpage)
end if

toxiang=request.form("toxiang")
	if toxiang="1" then
	fice=request.form("txdz1")
	elseif toxiang="2" then
	fice=request.form("txdz2")
	else
	fice="toxiang/00.gif"
	end if
	
QM=request.form("QM")
	if QM<>"" then
	QM=Server.HTMLEncode(QM)
	QM=updateform(QM)
	end if

JJ=Request.form("JJ")
	if JJ="" then
	JJ="我很懒，所以没有填……"
	end if
	JJ=Server.HTMLEncode(JJ)
	JJ=updateform(JJ)

if username="" or userpass="" or email="" or sex="" or username<>session("username") then
response.write(alert)
else
sql="select * from users where username='"&username&"'"
set rs=Server.CreateObject("ADODB.Recordset")
rs.open sql,conn,1,3
	if userpass<>rs("userpass") then
	response.write("密码错误")
	else
	rs.update
	rs("sex")=sex
	rs("email")=email
	rs("QQ")=QQ
	rs("userpage")=userpage
	rs("fice")=fice
	rs("QM")=QM
	rs("JJ")=JJ
	rs.update
	response.write("<script language='javascript'>alert('您的资料已经成功修改！');self.location=('eduserinfo.asp');</script>")
	end if
end if
rs.close
%>