m_user.asp

电子备课系统

      <TD width="40%">密码(至少6位)：<BR>
        请输入密码，区分大小写。 请不要使用任何类似 '*'、' ' 或 HTML 字符 </TD>
      <TD width="60%"> <INPUT   type=password maxLength=16 size=30 name=Password> <font color="#FF0000">如果不想修改，请留空(整合用户请到论坛修改)</font> </TD>
    </TR>
    <TR class="tdbg" >
      <TD>确认密码(至少6位)：<br>
        请再输一遍确认</TD>
      <TD><INPUT name=PwdConfirm   type=password id="PwdConfirm" size=30 maxLength=16> <font color="#FF0000">如果不想修改，请留空(整合用户请到论坛修改)</font> </TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">密码问题：<br>
        忘记密码的提示问题</TD>
      <TD width="60%"> <INPUT name="Question"   type=text value="<%=rsUser("Question")%>" size=30>(整合用户请到论坛修改)
      </TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">问题答案：<BR>
        忘记密码的提示问题答案，用于取回密码</TD>
      <TD width="60%"> <INPUT   type=text size=30 name="Answer"> <font color="#FF0000">如果不想修改，请留空(整合用户请到论坛修改)</font></TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">性别：</TD>
      <TD width="60%"> <INPUT type=radio value="1" name=sex <%if rsUser("Sex")=1 then Response.write "CHECKED"%>>
        男 &nbsp;&nbsp; <INPUT type=radio value="0" name=sex <%if rsUser("Sex")=0 then Response.write "CHECKED"%>>
        女</TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">Email地址：</TD>
      <TD width="60%"> <INPUT name=Email value="<%=rsUser("userEmail")%>" size=30   maxLength=50>
        <a href="mailto:<%=rsUser("userEmail")%>">给此用户发一封电子邮件</a>
      </TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">OICQ号码：</TD>
      <TD width="60%"> <INPUT name=OICQ value="<%=rsUser("qq")%>" size=30 maxLength=20></TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">MSN：</TD>
      <TD width="60%"> <INPUT name=msn value="<%=rsUser("Msn")%>" size=30 maxLength=50></TD>
    </TR>
    <%If CheckAccess("r_user_group") Then%>
    <TR class="tdbg" >
      <TD width="40%"><font color=red><b>用户组</b></font>：</TD>
      <TD width="60%">
      	<select name="groupid" id="groupid">
          <%
          Dim rsGroup,userGroup
          Set rsGroup=oblog.Execute("select groupid,g_name,g_level From oblog_groups Order By g_level")
          userGroup=Int(OB_IIF(rsUser("User_Group"),0))
          If userGroup=0 Then%>
          		<option value="0" selected>----尚未分类----</option>
          <%End If
          Do While Not rsGroup.Eof%>
          	<option value="<%=rsGroup(0)%>" <%If rsGroup(0)=UserGroup Then%>selected<%End if%>><%=rsGroup(2)%>-<%=rsGroup(1)%></option>
          		<%
          	rsGroup.Movenext
        	Loop
        	Set rsGroup=Nothing
          %>
        </select>(如果是将用户降级,则请同步修改(减少)积分)</TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%"><font color=red><b>用户积分</b></font>：</TD>
      <TD width="60%"> <INPUT name=scores value="<%=rsUser("scores")%>" size=30 maxLength=10></TD>
    </TR>
    <%End If%>
    <tr class="tdbg" onmouseover="this.style.backgroundColor='#BFDFFF'" onmouseout="this.style.backgroundColor=''">
      <td>已上传字节(字节)：</td>
      <td><input name=upfiles_size   type=text id="upfiles_size" value="<%=rsuser("user_upfiles_size")%>" size=30 maxlength=20></td>
    </tr>
    <TR class="tdbg" >
      <TD>是否为推荐博客：</TD>
      <TD><input type="radio" name="isbest" value=1 <%if rsUser("user_isbest")=1 then Response.write "checked"%>>
        是 &nbsp;&nbsp; <input type="radio" name="isbest" value=0 <%if rsUser("user_isbest")<>1 then Response.write "checked"%>>
        否</TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">用户目录：</TD>
      <TD width="60%"> <INPUT name=user_dir value="<%=rsUser("user_dir")%>" size=30 maxLength=50>
        如无必要请不要修改，否则将造成用户目录混乱</TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">用户状态：</TD>
      <TD width="60%"><input type="radio" name="LockUser" value=0 <%if rsUser("LockUser")=0 then Response.write "checked"%>>
        正常&nbsp;&nbsp; <input type="radio" name="LockUser" value=1 <%if rsUser("LockUser")=1 then Response.write "checked"%>>
        锁定</TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">审核状态：</TD>
      <TD width="60%"><input type="radio" name="User_Level" value=6 <%if rsUser("User_Level")=6 then Response.write "checked"%>>
        未审核&nbsp;&nbsp; <input type="radio" name="User_Level" value=7 <%if rsUser("User_Level")=7 then Response.write "checked"%>>
        已审核</TD>
    </TR>
    <%If oblog.cacheConfig(51)="1"  Then

    	If Not IsNull(rsuser("postmail")) Then sMail=rsuser("postmail")
    	If Not IsNull(rsuser("postmobile")) Then sMobile=rsuser("postmobile")
    	%>
    <TR class="tdbg" >
      <TD width="40%">发布用邮箱地址：</TD>
      <TD width="60%"> <INPUT   type=text maxLength=100 size=30 name=postmail value="<%=sMail%>"> <font color="#FF0000"></font> </TD>
    </TR>
    <TR class="tdbg" >
      <TD width="40%">发布用手机号码：         </TD>
      <TD width="60%"> <INPUT   type=text maxLength=11 size=30 name=postmobile value="<%=sMobile%>"> <font color="#FF0000">目前只支持中国移动GSM号码</font> </TD>
    </TR>
    <%End If%>
    <TR class="tdbg" >
      <TD height="40" colspan="2" align="center"><input name="Action" type="hidden" id="Action" value="SaveModify"> <input name=Submit   type=submit id="Submit" value="保存修改结果"> <input name="UserID" type="hidden" id="UserID" value="<%=rsUser("userID")%>"></TD>
    </TR>
  </TABLE>
</form>
		</div>
	</div>
	<ul class="main_end">
		<li class="main_end_left left"></li>
		<li class="main_end_right right"></li>
	</ul>
</div>
<%
    rsUser.Close
    Set rsUser = Nothing
End Sub


Sub UpdateUser()
%>
<div id="main_body">
	<ul class="main_top">
		<li class="main_top_left left">更 新 页 面</li>
		<li class="main_top_right right"> </li>
	</ul>
	<div class="main_content_rightbg">
		<div class="main_content_leftbg">
<FORM name="Form1" action="m_user.asp?action=DoUpdate" method="post">
  <table width="98%" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#FFFFFF" class="border">
    <tr align="center" class="title">
      <td height="22" colspan="2" class="topbg"><strong>更新用户静态页面</font></strong></td>
  </tr>
  <tr class="tdbg">
      <td colspan="2"><p>说明：<br>
          1、本操作将重新生成用户静态页面。<br>
          2、本操作可能将非常消耗服务器资源，而且更新时间很长，请仔细确认每一步操作后执行。<br>
      3 、本操作根据用户ｉｄ更新。 </p>
      </td>
  </tr>
  <tr class="tdbg">
    <td height="25">开始用户ID：</td>
    <td height="25"><input name="BeginID" type="text" id="BeginID" value="1" size="10" maxlength="10">
      用户ID，可以填写您想从哪一个ID号开始进行更新</td>
  </tr>
  <tr class="tdbg">
    <td height="25">结束用户ID：</td>
    <td height="25"><input name="EndID" type="text" id="EndID" value="1000" size="10" maxlength="10">
      将更新开始到结束ID之间的用户数据，之间的数值最好不要选择过大</td>
  </tr>
     <tr class="tdbg">
    <td height="25">&nbsp;</td>
    <td height="25"><input type="checkbox" name="t0" value="1" /><font color="red"><b>同时满足以下条件</b></font></td>
  </tr>
  <tr class="tdbg">
    <td height="25">登录次数大于：</td>
    <td height="25"><input name="Logintimes" type="text" id="Logintimes" value="0" size="10" maxlength="10">（不包括指定数值）
</td>
  </tr>
  <tr class="tdbg">
    <td height="25">日志数：</td>
    <td height="25"><input name="B_Logs" type="text" id="B_Logs" value="0" size="10" maxlength="10">&nbsp;至&nbsp;<input name="E_Logs" type="text" id="E_Logs" value="1000" size="10" maxlength="10">
    &nbsp; </td>
  </tr>
  <tr class="tdbg">
    <td height="25">&nbsp;</td>
    <td height="25"><input name="Submit" type="submit" id="Submit" value="生成静态页面"></td>
  </tr>
</table>
</form>
<FORM name="Form1" action="m_user.asp?action=DoUpdatelog" method="post">
  <table width="98%" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#FFFFFF" class="border">
    <tr align="center" class="title">
      <td height="22" colspan="2" class="topbg"><strong>更新日志静态页面</font></strong></td>
  </tr>
  <tr class="tdbg">
      <td colspan="2"><p>说明：<br>
          1、本操作将重新生成用户静态页面。<br>
          2、本操作可能将非常消耗服务器资源，而且更新时间很长，请仔细确认每一步操作后执行。<br>
      3、本操作根据日志ｉｄ更新。</p>
      </td>
  </tr>
  <tr class="tdbg">
    <td height="25">开始日志ID：</td>
    <td height="25"><input name="BeginID" type="text" id="BeginID" value="1" size="10" maxlength="10">
      日志ID，可以填写您想从哪一个ID号开始进行更新</td>
  </tr>
  <tr class="tdbg">
    <td height="25">结束日志ID：</td>
    <td height="25"><input name="EndID" type="text" id="EndID" value="1000" size="10" maxlength="10">
      将更新开始到结束ID之间的日志页面，之间的数值最好不要选择过大</td>
  </tr>
  <tr class="tdbg">
    <td height="25">&nbsp;</td>
    <td height="25"><input name="Submit" type="submit" id="Submit" value="生成日志静态页面"></td>
  </tr>
</table>
</form>
		</div>
	</div>
	<ul class="main_end">
		<li class="main_end_left left"></li>
		<li class="main_end_right right"></li>
	</ul>
</div>
  <%
End Sub

Sub gouser1()
%>
<div id="main_body">
	<ul class="main_top">
		<li class="main_top_left left">登录到用户管理后台</li>
		<li class="main_top_right right"> </li>
	</ul>
	<div class="main_content_rightbg">
		<div class="main_content_leftbg">
<FORM name="Form1" action="m_user.asp?action=gouser2" method="post" target="_blank">
  <table width="98%" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#FFFFFF" class="border">
  <tr class="tdbg">
      <td colspan="2"><p>说明：<br>
          本操作供管理员登录到用户的管理界面进行管理。<br>
          当用户操作出现障碍时，可进入该用户后台，协助用户进行操作。<br>
        </p>
      </td>
  </tr>
  <tr class="tdbg">
    <td height="25">用户账号：</td>
    <td height="25"><input name="username" type="text" id="username" value="" size="30" maxlength="50"></td>
  <tr class="tdbg">
    <td height="25">&nbsp;</td>
    <td height="25"><input name="Submit" type="submit" id="Submit" value=" 提交 "></td>
  </tr>
</table>
</form>
		</div>
	</div>
	<ul class="main_end">
		<li class="main_end_left left"></li>
		<li class="main_end_right right"></li>
	</ul>
</div>
  <%
End Sub
%>
</body>
</html>
<%

Sub gouser2()
    Dim rs, username
    If CheckAccess("r_user_admin")=false Then
    	 Response.Write("您没有进入用户后台的权限"):Response.End()
	End If
    username = oblog.filt_badstr(Trim(Request("username")))
    if username="" then Response.Write("用户名不能为空"):Response.End()
    set rs=Server.CreateObject("adodb.recordset")
	rs.open("select username,TruePassWord,user_group from oblog_user where username='"&username&"'"),conn,1,3
    If Not rs.EOF Then
		If Not CheckGoUser(rs(2)) Then
			Response.Write "无权限"
			Exit Sub
		End If
		If IsNull(rs(1)) Then
			rs(1) = RndPassword(16)
			rs.update
		End if
        oblog.SaveCookie rs(0), rs(1), 0
        Set rs = Nothing
		WriteSysLog "进行了进入用户后台操作，目标用户："&username&"",oblog.NowUrl&"?"&Request.QueryString
        Response.Redirect ("../user_index.asp")
    Else
        Set rs = Nothing
        Response.Write("无此用户"):Response.End()
    End If
End Sub
Sub SaveModify()
	If Request.QueryString <>"" Then Exit Sub
    Dim userid, Password, PwdConfirm, Question, Answer, Sex, Email, Homepage, OICQ, MSN, User_Level, LockUser, isbest
    Dim rsUser, sqlUser,Scores,user_Group
    Dim blogname, usertype, user_upfiles_max, upfiles_size, user_domain, user_domainroot
    Action = Trim(Request("Action"))
    userid = Trim(Request("UserID"))
    If userid = "" Then
        FoundErr = True
        ErrMsg = ErrMsg & "<br><li>参数不足！</li>"
        Exit Sub
    Else
        userid = CLng(userid)
    End If
    Password = Trim(Request("Password"))
    PwdConfirm = Trim(Request("PwdConfirm"))
    Question = Trim(Request("Question"))
    Answer = Trim(Request("Answer"))
    Sex = Trim(Request("Sex"))
    Email = Trim(Request("Email"))
    Homepage = Trim(Request("Homepage"))
    OICQ = Trim(Request("OICQ"))
    MSN = Trim(Request("MSN"))
    User_Level = Trim(Request("User_Level"))
    isbest = Trim(Request("isbest"))
    LockUser = Trim(Request("LockUser"))
    blogname = Trim(Request("blogname"))
    usertype = Trim(Request("usertype"))
    user_upfiles_max = Trim(Request("user_upfiles_max"))
    upfiles_size = Trim(Request("upfiles_size"))
    user_domain = Trim(Request("user_domain"))
    user_domainroot = Trim(Request("user_domainroot"))
	user_group= Request("groupid")
	scores= Request("scores")
    If Password <> "" Then
        If oblog.strLength(Password) > 12 Or oblog.strLength(Password) < 6 Then
            FoundErr = True
            ErrMsg = ErrMsg & "<br><li>密码不能大于12小于6，如果你不想修改密码，请保持为空。</li>"
        End If
        If InStr(Password, "=") > 0 Or InStr(Password, "%") > 0 Or InStr(Password, Chr(32)) > 0 Or InStr(Password, "?") > 0 Or InStr(Password, "&") > 0 Or InStr(Password, ";") > 0 Or InStr(Password, ",") > 0 Or InStr(Password, "'") > 0 Or InStr(Password, ",") > 0 Or InStr(Password, Chr(34)) > 0 Or InStr(Password, Chr(9)) > 0 Or InStr(Password, "