forget.asp

本系统是一套开源WEB的网站管理系统

<!--#include file="include/ms_setting.asp"-->
<!--#include file="include/md5.asp"-->
<%
'==============================================================
'程序名称：茂盛网站管理系统(Maoin CSM)
'当前版本：Maosin CMS Version 1.1   Powered by maosin.com
'程序作者：阿茂（李胜茂）
'网站地址：www.maosin.com   www.maosin.net
'      QQ：57861417  
'电子邮箱：[e-mail]  [e-mail]
'--------------------------------------------------------------
'Copyright (C) 2006 maosin.com All Rights Reserved.
'免费版本请在程序首页保留(Powered by：Maosin CMS)版权链接信息；
'您可以对此版本进行修改，美化，但请保留此ASP文件内的版权信息；
'茂盛设计网保留此软件的法律追究权利
'==============================================================
%>
<!--#include file="ms_start.asp"-->
<script language="JavaScript" src="include/wisdom.js"></script>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0" class="mainMiddle_tdble"><tr>
<!--左栏开始-->
<td valign="top" class="mainMiddle_td_left">
		<div class="groupblock">
		<table border="0" cellpadding="0" cellspacing="0" width="100%"><tr><td class="ltl"><script type="text/javascript">ico()</script></td><td class="ltc"><span class="tt">会员登录</span></td><td class="ltr"></td></tr></table>
		<div class="lmc"><%Call publiclogonModule()%></div>
		</div>
		<div class="groupblock">
		<table border="0" cellpadding="0" cellspacing="0" width="100%"><tr><td class="ltl"><script type="text/javascript">ico()</script></td><td class="ltc"><span class="tt">站内搜索</span></td><td class="ltr"></td></tr></table>
		<div class="lmc"><%Call searchInput("art")%></div>
		</div>
</td>
<td class="mainMiddle_td_middle"></td>
<td width="*" valign="top" class="mainMiddle_td_right">
<table cellspacing="0" class="naviTable"><tr><td class="naviL"></td><td class="naviM"><span class="rtt">当前位置：<a class="classNavig" href="index.asp">本站首页</a>→<a class="classNavig" href="forget.asp">找回密码</a></span></td><td class="naviR"></td></tr></table>
<%
Call forget()
%>
</td></tr></table>
<!--#include file="ms_End.asp"-->
<%
Sub forget()
If request.form("step2")="maosin_step2" Then
	Call Step2()
Elseif request.form("step3")="maosin_step3" Then
	Call Step3()
Elseif request.form("step4")="maosin_step4" Then
	Call Step4()
Else
	Call step1()
End If
End Sub
'-----------------------第一步：输入用户名-----------------------------------------
Sub step1()%>
<table width="100%" border="0" cellpadding="0" cellspacing="1" class="table_border">
  <tr> 
    <td height="78" valign="top"><table width="100%" border="0" cellpadding="8" cellspacing="0" class="text">
        <form name="forgetform" method="post" action="?action=forget">
        <tr> 
          <td height="24" align="center" valign="middle" style="font-weight:bold;">第一步：请输入用户名</td>
        </tr>
        <tr> 
          <td height="26" align="center" valign="middle">请输入您的用户名： <input type="text" name="user_name" class="wenbenkang"></td>
        </tr>
        <tr> 
          <td height="28" align="center" valign="middle"> 
		  <input type="hidden" name="step2" value="maosin_step2">
		  <input type="submit" name="moveDown" value="下一步" class="but1" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> 
            <input type="button" name="Submit2" onClick="window.history.go(-1);" value="返回" class="but1" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> </td>
        </tr></form>
      </table></td>
  </tr>
</table>
<%
End Sub
'--------------------第二步：回答问题--------------------------
Sub Step2()
	dim username,sql
	username=trim(request.form("user_name"))
	if ms_submit=0 then
		if chkIsOut=false then
			showmsg "<font color=""#ff0000"">茂盛系统返回如下信息：</font><br><br>对不起，本站不允许从外部提交数据","系统出错信息"
			exit sub
		end if
	end if
	if username="" then
		showmsg "用户名不能为空","出错信息"
		exit sub
	end if
	if chkIsAvaStr(username)=false then
		showmsg "用户名含有非法字符","出错信息"
		exit sub
	end if
	sql="select * from ms_user where user_name='"&LCase(chkFormStr(username))&"'"
	set rs=conn.execute(sql)
	if rs.eof and rs.bof then
		Response.write("<script>alert('没有此用户["&username&"]');window.history.go(-1);</script>")
		rs.close
		set rs=nothing
		exit sub
	end if
%>
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="table_border">
  <tr> 
    <td height="78" valign="top"><table width="100%" border="0" cellpadding="8" cellspacing="0" class="text">
        <form name="forgetform" method="post" action="?action=forget">
        <tr> 
          <td height="24" align="center" valign="middle" style="font-weight:bold;">第二步：请回答问题</td>
        </tr>
        <tr> 
          <td height="24" align="center" valign="middle" style="font-weight:bold;">用 户 名：<font color="#ff0000"><%=username%></font>
		  <input type="hidden" name="user_name" value=<%=rs("user_name")%>>
		  </td>
        </tr>
        <tr> 
          <td height="26" align="center" valign="middle">密码提示问题：<font color="#ff0000"><%=rs("user_question")%></font></td>
        </tr>
        <tr> 
          <td height="26" align="center" valign="middle">请输入您的答案： <input type="text" name="user_answer" class="wenbenkang" maxlength="20"></td>
        </tr>
        <tr> 
          <td height="28" align="center" valign="middle"> 
		  <input type="hidden" name="step3" value="maosin_step3">
		  <input type="button" name="moveUp"  onClick="window.history.go(-1);" value="上一步" class="but1" type="submit" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> 
		  <input type="submit" name="moveDown" value="下一步" class="but1" type="submit" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> 
            <input type="button" name="Submit2" onClick="window.history.go(-2);" value="返回" class="but1" type="submit" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> </td>
        </tr></form>
      </table></td>
  </tr>
</table>
<%rs.close
set rs=nothing
End Sub
'-----------------------第三步：输入密码-----------------------------------------------------
Sub Step3
dim userName,userAnswer,sql
userName=request.form("user_name")
userAnswer=request.form("user_answer")
if userName="" then
	showmsg "用户名不能为空","出错信息"
	exit sub
end if
if chkIsAvaStr(userName)=false then
	showmsg "用户名含有非法字符","出错信息"
	exit sub
end if
if ms_submit=0 then
	if chkIsOut=false then
		showmsg "<font color=""#ff0000"">茂盛系统返回如下信息：</font><br><br>对不起，本站不允许从外部提交数据","系统出错信息"
		exit sub
	end if
end if
if Len(trim(userAnswer))=0 or Len(trim(userAnswer))>20 then
	Response.write("<script>alert('答案不能为空或大于20个字符!');window.history.go(-1);</script>")
	exit sub
end if
sql="select * from ms_user where user_name='"&userName&"' and user_answer='"&md5(userAnswer)&"'"
set rs=conn.execute(sql)
if rs.eof and rs.bof then
	rs.close
	set rs=nothing
	Response.write("<script>alert('您的答案错误!');window.history.go(-1);</script>")
	exit sub
end if%>
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="table_border">
  <tr> 
    <td height="78" valign="top"><table width="100%" border="0" cellpadding="8" cellspacing="0" class="text">
        <form name="forgetform" method="post" action="?action=forget">
        <tr> 
          <td height="24" align="center" valign="middle" style="font-weight:bold;">第三步：您的问题已经通过了,现在可以重新<font color="#ff0000">设置密码!</font></td>
        </tr>
        <tr> 
          <td height="24" align="center" valign="middle" style="font-weight:bold;">用 户 名：<font color="#ff0000"><%=userName%></font>
		  <input type="hidden" name="user_id" value="<%=rs("user_id")%>">
		  <input type="hidden" name="answer" value="<%=userAnswer%>">
		  </td>
        </tr>
        <tr> 
          <td height="26" align="center" valign="middle">设置新密码：<input type="password" name="password1" class="wenbenkang" maxlength="16"></font></td>
        </tr>
        <tr> 
          <td height="26" align="center" valign="middle">确认新密码： <input type="password" name="password2" class="wenbenkang" maxlength="16"></td>
        </tr>
        <tr> 
          <td height="28" align="center" valign="middle"> 
		  <input type="hidden" name="step4" value="maosin_step4">
		  <input type="button" name="moveUp"  onClick="window.history.go(-1);" value="上一步" class="but1" type="submit" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> 
		  <input type="submit" name="moveDown" value="下一步" class="but1" type="submit" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> 
            <input type="button" name="Submit2" onClick="window.history.go(-3);" value="返回" class="but1" type="submit" onMouseOver="this.className='but2'" onMouseOut="this.className='but1'"> </td>
        </tr></form>
      </table></td>
  </tr>
</table>
<%rs.close
set rs=nothing
End Sub
'---------------------第四步：设置密码--------------------------
Sub step4()
	dim password1,password2,user_id
	password1=trim(request.form("password1"))
	password2=trim(request.form("password2"))
	user_id=trim(request.form("user_id"))
	answer=trim(request.form("answer"))
	if answer="" then
		showmsg "<li>问题答案不能为空</li>","出错信息"
	elseif strLength(answer)>20 then
		showmsg "<li>问题答案最多不能大于 <font color=""#ff0000"">20</font> 个字符</li>","出错信息"
	end if
	if password1=""then
		showmsg "<li>密码不能为空</li>","出错信息"
		exit sub
	elseif strLength(password1)>20 then
		showmsg "<li>密码长度最长不能大于 <font color=""#ff0000"">20</font> 个字符</li>","出错信息"
		exit sub
	elseif password1<>password2 then
		showmsg "<li>两次输入的密码不正确!</li>","出错信息"
		exit sub
	end if
	if isNumeric(user_id)=false then
		showmsg "用户ID出错","出错信息"
		exit sub
	end if
	if ms_submit=0 then
		if chkIsOut=false then
			showmsg "<font color=""#ff0000"">茂盛系统返回如下信息：</font><br><br>对不起，本站不允许从外部提交数据","系统出错信息"
			exit sub
		end if
	end if
	sql="update ms_user set user_password='"&md5(password1)&"' where user_id="&user_id&" and user_answer='"&md5(answer)&"'"
	dim find
	conn.execute sql,find
	if find=0 then
		showmsg "很抱歉，密码设置失败。可能您给的条件不符合！","密码设置失败"
	else
		showmsg "恭喜，密码设置成功！请重新登录！","成功找回密码"
	end if
	exit sub	
End Sub
'========================================================
'MaoSin CMS 1.1       Power by maosin.com
'Email: [e-mail] , [e-mail]
'Web: http://www.maosin.com  http://www.maosin.net
'Copyright (C) 2006 maosin.com All Rights Reserved.
'========================================================
%>