sendpass.asp

这是一套基于WEB的网站管理系统

<!--#include file="../conn.asp"-->
<!--#include file="../inc/const.asp"-->
<!--#include file="../inc/email.asp"-->
<!--#include file="../inc/md5.asp"-->
<!--#include file="head.inc"-->
<script language="JavaScript">locationid.innerHTML = "找回密码";</script>
<%
Dim Founderr
Dim useremail
Dim topic
Dim mailbody
Dim sendmsg
Dim answer
Dim repassword
Dim username
Dim password
Dim rs
Dim sql
Dim Errmsg
Dim Sucmsg

Founderr = False
Set Rs = Server.CreateObject("adodb.recordset")
Response.Write "<br>"
Founderr = False
If Founderr Then
	Response.Write "<script>alert('" & Errmsg & "');history.go(-1)</script>"
Else
	If Trim(Request("action")) = "step1" Then
		Call step1
	ElseIf Trim(Request("action")) = "step2" Then
		Call step2
	ElseIf Trim(Request("action")) = "step3" Then
		Call step3
	Else
		Call main
	End If
	If Founderr Then Response.Write "<script>alert('" & Errmsg & "');history.go(-1)</script>"
End If

Private Sub step1()
	If Trim(Request("username")) = "" Then
		Founderr = True
		Errmsg = Errmsg + "请输入您的用户名。"
		Exit Sub
	Else
		UserName = Replace(Request("username"), "'", "")
	End If
	If CInt(Newasp.IsCloseMail) = 1 Then
		Set Rs = Newasp.Execute("Select * from [NC_User] where username='" & UserName & "'")
	Else
		Set Rs = Newasp.Execute("Select * from [NC_User] where username='" & UserName & "'")
	End If
	If Rs.EOF And Rs.bof Then
		Founderr = True
		Errmsg = Errmsg + "您输入的用户名并不存在，请重新输入。或者由于该系统不支持邮件发送，只能通过联系站长获得密码。"
	Else
		If Rs(13) = "" Or IsNull(Rs(13)) Then
			Founderr = True
			Errmsg = Errmsg + "该用户没有填写密码问题及答案，只有填写的用户方能继续。"
		Else
			Response.Write "<form action=""sendpass.asp?action=step2"" method=""post""> "
			Response.Write "<table cellpadding=4 cellspacing=1 align=center class=tableborder1>"
			Response.Write " <tr>"
			Response.Write " <th valign=middle colspan=2 align=center height=25>取回密码（第二步：回答问题）</th></tr>"
			Response.Write " <tr>"
			Response.Write " <td valign=middle class=tablerow><b>问