save.asp

it is a good thing i think you will like it

<!--#include file="dbpath.asp"-->
<%
'### 用户退出登陆 #################
if request("type")="exit" then
session("jypxlogin")=""
response.redirect "user.asp?type=login"
'### 管理员退出登陆 ###################
elseif request("type")="admexit" then
session("jypxadmin")=""
response.redirect "login.asp"
'### 新站加入 ################           
elseif request("type")="reg" then%>              
<!--#include file="char.inc"-->              
<%
if request.form("user")  ="" then errmsg=errmsg & "请填写‘用户名’  !\n"
if request.form("pwd")   ="" then errmsg=errmsg & "请填写‘密码’    !\n"
if request.form("email") ="" then errmsg=errmsg & "请填写‘E-mail’  !\n"
if request.form("web")   ="" then errmsg=errmsg & "请填写‘网站名称’!\n"
if request.form("url")="" or request.form("url")="http://" then errmsg=errmsg & "请填写‘网站地址’!\n"
if request.form("txt")   ="" then errmsg=errmsg & "请填写‘网站描述’!\n"
Set rsc = Conn.Execute("select * from link where user = '"&request.form("user")&"'")
if not rsc.eof then errmsg=errmsg & "■此‘用户名’已被注册，请改名!\n"
if errmsg<>"" then
 response.write("<script>alert('" & errmsg & "');history.go(-1)</script>")              
 response.end              
end if                     
set rs=server.createobject("adodb.recordset")              
sql="select * from link where (id is null)"
rs.open sql,conn,1,3
rs.addnew
rs("user")=request.form("user")             
rs("pwd")=request.form("pwd")
rs("email")=htmlencode(request.form("email"))                          
rs("web")=htmlencode(request.form("web"))              
rs("url")=htmlencode(request.form("url"))              
rs("txt")=htmlencode(request.form("txt"))
  if request.form("logo")="http://" then
    rs("logo")=""
  else
    rs("logo")=htmlencode(request.form("logo"))
  end if
rs.Update              
rs.close               
set rs=nothing
response.write "<meta http-equiv='Refresh' content='0; URL=user.asp?type=regok&user="&request.form("user")&"'>"
response.end
'### 用户登陆密码验证 #############
elseif request("type")="login" then
  if request.form("user")="" or request.form("pwd")="" then
  response.write("<script>alert('用户名/密码不能为空!');history.go(-1)</script>")
  response.end
  end if
set rs=server.createobject("adodb.recordset")
 sql="select * from link where user='"&request.form("user")&"' and pwd='"&request.form("pwd")&"'"
 rs.open sql,conn,1,1
  if rs("user")="" then
     response.write("<script>alert('用户名/密码错误!');history.go(-1)</script>")
     response.end
  else
     session("jypxlogin")=request.form("user")
  end if
rs.close  
set rs=nothing
response.redirect "user.asp?type=edit&user="&request.form("user")&""
'### 用户修改资料 ################           
elseif request("type")="edit" then%>              
<!--#include file="char.inc"-->              
<%
if request.form("pwd")   ="" then errmsg=errmsg & "请填写‘密码’    !\n"
if request.form("email") ="" then errmsg=errmsg & "请填写‘E-mail’  !\n"
if request.form("web")   ="" then errmsg=errmsg & "请填写‘网站名称’!\n"
if request.form("url")   ="" then errmsg=errmsg & "请填写‘网站地址’!\n"
if request.form("txt")   ="" then errmsg=errmsg & "请填写‘网站描述’!\n"
if errmsg<>"" then              
 response.write("<script>alert('" & errmsg & "');history.go(-1)</script>")              
 response.end              
end if              
if session("jypxadmin")="ok" or session("jypxlogin")=request("user") then              
set rs=server.createobject("adodb.recordset")              
sql="select * from link where user='"&request("user")&"'"              
rs.open sql,conn,1,3              
rs("pwd")=request.form("pwd")
rs("email")=htmlencode(request.form("email"))                            
rs("web")=htmlencode(request.form("web"))              
rs("url")=htmlencode(request.form("url"))              
rs("txt")=htmlencode(request.form("txt"))   
rs("logo")=htmlencode(request.form("logo"))
rs("star")=htmlencode(request.form("star"))
rs("best")=htmlencode(request.form("best"))
rs.Update              
rs.close               
set rs=nothing              
response.write("<script>alert('你的资料已成功修改!')</script>")              
response.redirect Request.ServerVariables("HTTP_REFERER")           
else              
response.write("<script>alert('登陆超时!')</script>")              
response.redirect Request.ServerVariables("HTTP_REFERER")            
end if
'### 管理员登陆验证 ##################              
elseif request("type")="admin" then
user=replace(trim(request("user")),"'","")
pwd=replace(trim(request("pwd")),"'","")             
if user="" or pwd="" then response.write("<script>alert('用户名和密码都不能为空!');history.go(-1)</script>") end if         
set rsadm=server.createobject("adodb.recordset")              
sqladm="select * from admin where user='"&user&"'"              
rsadm.open sqladm,conn,1,1              
if not rsadm.eof then              
 if pwd=rsadm("pwd") then             
  session("jypxadmin")="ok"              
  response.redirect "admin.asp"             
 else              
  response.write("<script>alert('用户名/密码错误!');history.go(-1)</script>")             
 end if              
else             
 response.write("<script>alert('用户名/密码错误!');history.go(-1)</script>")              
end if             
rsadm.close             
set rsadm=nothing
'### 管理员删除联盟用户 ################
elseif request("type")="del" then
    if session("jypxadmin")<>"ok" then
    response.write("<script>alert('管理登陆超时，请重新登陆！')</script>")
    %><script LANGUAGE="JavaScript"><!-- 
setTimeout('window.close();', 100); 
// --></script>
    <%response.end
    end if
    if request("id")="" then response.write("<script>alert('■参数错误:编号不能为空！')</script>") end if
    set rst=server.CreateObject("ADODB.RecordSet")
	rst.open "delete * from link where id="+request("id"),conn,1
	rst.close%>
■■■■■■■■■■<br>删除完成！<Br><Br>2秒后自动关闭...              
<script LANGUAGE="JavaScript"><!--               
setTimeout('window.close();', 2000);               
// --></script>
<%'### 取回密码 ######################             
elseif request("type")="pwd" then             
sql_admin="select * from admin"                                                                                                                                                                       
Set rs_admin= Server.CreateObject("ADODB.Recordset")                                                                                                                                                                       
rs_admin.open sql_admin,conn,1,1             
set rs=server.createobject("adodb.recordset")              
sql="select * from link where user='"&request.form("user")&"'"             
rs.open sql,conn,1,1             
if rs.eof and rs.bof then             
response.write("<script>alert('没有此用户名!');history.go(-1)</script>")             
response.end             
end if             
if rs("email")<>"" then             
tmp = "http://" & request.servervariables("SERVER_NAME") & _                         
left(request.servervariables("SCRIPT_NAME"),len(request.servervariables("SCRIPT_NAME"))-len("save.asp"))             
Set mail = Server.CreateObject("CDONTS.NewMail")             
mail.To = ""&rs("email")&""             
mail.From = ""&rs_admin("email")&""             
mail.Subject = ""&rs_admin("webname")&" 登陆密码"             
Body1="您好！                                                                                                           "             
Body2="下面是你在“"&rs_admin("webname")&"”里的相关信息                                                                "             
Body3="用户名: "&rs("user")&"                                                                                           "             
Body4="密  码: "&rs("pwd")&"                                                                                            "             
Body5=""&tmp&"                                                                                                          "             
Body6=".                                                                                                                "             
Body7="--------------------------------------------                                                                     "             
Body8="程序制作： http://www.cput.com                                                                                  "             
mail.Body = Body1+Body2+Body3+Body4+Body5+Body6+Body7+Body8             
mail.Send             
mail.close             
set mail=nothing             
response.write("<script>alert('■成功!密码已发到你注册时用的信箱里了,请注意查收!');history.go(-1)</script>")             
response.end             
else             
response.write("<script>alert('■失败!你注册时时没有填写EMAIL。 要取回密码请与管理员联系。');history.go(-1)</script>")             
response.end             
end if             
rs_admin.close             
set rs_admin=nothing             
rs.close             
set rs=nothing             
'### 非法操作 ######################              
else              
response.write("<script>alert('■非法操作!')</script>")              
response.write "<meta http-equiv='Refresh' content='0; URL=index.asp'>"             
end if              
conn.close              
set conn=nothing%>