user.asp

公司企业网站管理系统全站源码,用于企业内部对网站的管理

	end if
	'用户签名长度限制 2004-9-13 Dv.Yz
	If Dvbbs.StrLength(Request.Form("sign")) > 250 Then
		Response.Write "<tr><td colspan=8 class=td1>用户签名不能超过 250 个字符。</td></tr>"
		Founderr = True
	End If
	if not founderr then
	Dim iUserClass,iTitlePic
	Set Rs=Dvbbs.Execute("Select * From Dv_UserGroups Where UserGroupID = " & Request.Form("usergroups"))
	If Rs.Eof And Rs.Bof Then
		Response.Write "<tr><td colspan=8 class=td1>所选用户组信息并不存在。</td></tr>"
		Founderr = True
	Else
		iUserClass = Rs("UserTitle")
		iTitlePic = Rs("GroupPic")
	End If
	Dim UpUserName
	Set rs= Server.CreateObject("ADODB.Recordset")
	sql="select * from [dv_user] where userid="&request("userid")
	rs.open sql,conn,1,3
	if rs.eof and rs.bof then
		response.write "<tr><td colspan=8 class=td1>没有找到相关用户。</td></tr>"
		founderr=true
	Else
		UpUserName = rs("username")
		Rs("UserPhoto")=Request.form("UserPhoto")
		'rs("username")=request.form("username")
		if request.form("password")<>"" then
			rs("userpassword")=md5(request.form("password"),16)
		end if
		rs("usergroupid")=request.form("usergroups")
		rs("userquesion")=request.form("quesion")
		if request.form("answer")<>"" then rs("useranswer")=md5(request.form("answer"),16)
		rs("userclass")=iUserClass
		rs("useremail")=request.form("useremail")
		Rs("UserSex")=request.form("sex")
		rs("userim")=myuserim
		rs("userface")=request.form("face")
		if isnumeric(request.form("width")) then rs("userwidth")=request.form("width")
		if isnumeric(request.form("height")) then rs("userheight")=request.form("height")
		rs("usertitle")=request.form("usertitle")
		rs("titlepic")=iTitlePic
		if isnumeric(request.form("article")) then rs("UserPost")=request.form("article")
		if isnumeric(request.form("userdel")) then rs("userdel")=request.form("userdel")
		if isnumeric(request.form("userisbest")) then rs("userisbest")=request.form("userisbest")
		if isnumeric(request.form("userpower")) then rs("userpower")=request.form("userpower")
		if isnumeric(request.form("userwealth")) then rs("userwealth")=request.form("userwealth")
		if isnumeric(request.form("usermoney")) then rs("usermoney")=request.form("usermoney")
		if isnumeric(request.form("UserTicket")) then rs("UserTicket")=request.form("UserTicket")
		if isnumeric(request.form("userep")) then rs("userep")=request.form("userep")
		if isnumeric(request.form("usercp")) then rs("usercp")=request.form("usercp")
		if isdate(request.form("birthday")) then rs("userbirthday")=request.form("birthday")
		if isdate(request.form("adddate")) then rs("JoinDate")=request.form("adddate")
		if isdate(request.form("lastlogin")) then rs("lastlogin")=request.form("lastlogin")
		if isdate(request.form("Vip_StarTime")) then rs("Vip_StarTime")=request.form("Vip_StarTime")
		if isdate(request.form("Vip_EndTime")) then rs("Vip_EndTime")=request.form("Vip_EndTime")
		if isnumeric(request.form("lockuser")) then rs("lockuser")=request.form("lockuser")
		rs("usersign")=request.form("sign")
		rs("userinfo")=userinfo
		If request.form("IsChallenge")="0" Or Request.Form("UserMobile")="" Then
			Rs("IsChallenge")=0
			Rs("UserMobile")=""
		Else
			Rs("IsChallenge")=1
			Rs("UserMobile")=Request.Form("UserMobile")
		End If
		rs.update
	end if
	rs.close
	set rs=nothing
	end if
	if not founderr then
		'-----------------------------------------------------------------
		'系统整合
		'-----------------------------------------------------------------
		Dim DvApi_Obj,DvApi_SaveCookie,SysKey
		If DvApi_Enable Then
			Set DvApi_Obj = New DvApi
				DvApi_Obj.NodeValue "syskey",SysKey,0,False
				DvApi_Obj.NodeValue "action","update",0,False
				DvApi_Obj.NodeValue "username",UpUserName,1,False
				Md5OLD = 1
				SysKey = Md5(DvApi_Obj.XmlNode("username")&DvApi_SysKey,16)
				Md5OLD = 0
				DvApi_Obj.NodeValue "syskey",SysKey,0,False
				DvApi_Obj.NodeValue "password",Request.form("password"),1,False
				DvApi_Obj.NodeValue "answer",Request.Form("useranswer"),1,False
				DvApi_Obj.NodeValue "question",Request.Form("quesion"),1,False
				DvApi_Obj.NodeValue "email",Request.Form("useremail"),1,False
				DvApi_Obj.SendHttpData
				If DvApi_Obj.Status = "1" Then
					response.write "<tr><td colspan=8 class=td1>"&DvApi_Obj.Message&"</td></tr>"
				End If
			Set DvApi_Obj = Nothing
		End If
		'-----------------------------------------------------------------
	End If
	if founderr then
		response.write "<tr><td colspan=8 class=td1>更新失败。</td></tr>"
	else

		response.write "<tr><td colspan=8 class=td1>更新用户数据成功。</td></tr>"
	end if
End Sub

Sub UserPermission()
	Response.Write "<tr><th colspan=8 style=""text-align:center;"">编辑" & Request("Username") & "论坛权限（红色表示该用户在该版面有自定义权限）</th></tr>"
	If Not Isnumeric(Request("Userid")) Then
		Response.Write "<tr><td colspan=8 class=td1>错误的用户参数。</td></tr>"
		Founderr = True
	End If
	If Not Founderr Then
		Response.Write "<tr><td colspan=8 class=td1 height=25>①您可以设置该用户在不同论坛内的权限，红色表示为该用户组使用的是用户自定义属性<BR>②该权限不能继承，比如您设置了一个包含下级论坛的版面，那么只对您设置的版面生效而不对其下属论坛生效<BR>③如果您想设置生效，必须在设置页面<B>选择自定义设置</B>，选择了自定义设置后，这里设置的权限将<B>优先</B>于用户组设置和论坛权限设置，比如用户组默认或论坛权限设置该用户组不能管理帖子，而这里设置了该用户可管理帖子，那么该用户在这个版面就可以管理帖子</td></tr>"
		Set Trs = Dvbbs.Execute("SELECT Uc_UserId FROM Dv_UserAccess WHERE Uc_Boardid = 0 AND Uc_Userid = " & Request("Userid"))
		If Trs.Eof And Trs.Bof Then
		Response.Write "<tr><td colspan=8 class=td1 height=25><a href=?action=UserBoardPermission&boardid=0&userid=" & Request("Userid") & ">编辑该用户在全局的权限</a>（前台短信、前台用户信息、帖子和权限管理、进入后台权限等）</td></tr>"
		Else
		Response.Write "<tr><td colspan=8 class=td1 height=25><a href=?action=UserBoardPermission&boardid=0&userid=" & Request("Userid") & "><font color=red>编辑该用户在全局的权限</font></a>（前台短信、前台用户信息、帖子和权限管理、进入后台权限等）</td></tr>"
		End If
'----------------------boardinfo--------------------
		Response.Write "<tr><td colspan=8 class=td1><B>点击论坛名称进入编辑状态</B><BR>"
		Rem 改用数组代替循环查询 2004-5-6 Dvbbs.YangZheng
		Dim Bn,Sql,Rs,i
		Sql = "SELECT Depth, Child, Boardid, Parentid, Boardtype FROM Dv_Board ORDER BY Rootid, Orders"
		Set Rs = Dvbbs.Execute(Sql)
		If Not (Rs.Eof And Rs.Bof) Then
			Sql = Rs.GetRows(-1)
			Rs.Close:Set Rs = Nothing
			For Bn = 0 To Ubound(Sql,2)
				If Sql(0,Bn) > 0 Then
					For i = 1 To Sql(0,Bn)
						Response.Write "&nbsp;"
					Next
				End If
				If Sql(1,Bn) > 0 Then
					Response.Write "<img src=""../skins/default/plus.gif"">"
				Else
					Response.Write "<img src=""../skins/default/nofollow.gif"">"
				End If
%>
<a href="?action=UserBoardPermission&boardid=<%=Sql(2,Bn)%>&userid=<%=Request("Userid")%>">
<%
				Set Trs = Dvbbs.Execute("SELECT Uc_UserId FROM Dv_UserAccess WHERE Uc_Boardid = " & Sql(2,Bn) & " AND Uc_Userid = " & Request("Userid"))
				If Not (Trs.Eof And Trs.Bof) Then
					Response.Write "<font color=red>[自定义]"
				End If
				If Sql(3,Bn) = 0 Then Response.Write "<b>"
				Response.Write Sql(4,Bn)
				If Sql(3,Bn) = 0 Then Response.Write "</b>"
				If Sql(1,Bn) > 0 Then Response.Write "(" & Sql(1,Bn) & ")"
				Response.Write "</font></a><BR>"
			Next
		End If
		Response.Write "</td></tr>"
'-------------------end-------------------
	End If
End Sub

Sub UserBoardPermission()
	Dim rs
	if not isnumeric(request("userid")) then
		response.write "<tr><td colspan=8 class=td1>错误的用户参数。</td></tr>"
		founderr=true
	end if
	if not isnumeric(request("boardid")) then
		response.write "<tr><td colspan=8 class=td1>错误的版面参数。</td></tr>"
		founderr=true
	end if
	if not founderr then
	set rs=Dvbbs.Execute("select u.UserGroupID,ug.title,u.username from [dv_user] u inner join dv_UserGroups UG on u.userGroupID=ug.userGroupID where u.userid="&request("userid"))
	Dvbbs.UserGroupID=rs(0)
	usertitle=rs(1)
	Dvbbs.membername=rs(2)
	dim boardtype
	set rs=Dvbbs.Execute("select boardtype from dv_board where boardid="&request("boardid"))
	if rs.eof and rs.bof then
	boardtype="论坛其他页面"
	else
	boardtype=rs(0)
	end if
	response.write "<tr><th colspan=8 style=""text-align:center;"">编辑 "&Dvbbs.membername&" 在 "&boardtype&" 权限</th></tr>"
	response.write "<tr><td colspan=8 height=25 class=td1>注意：该用户属于 <B>"&usertitle&"</B> 用户组中，如果您设置了他的自定义权限，则该用户权限将以自定义权限为主</td></tr>"
%>
<tr><td colspan=8 class=td1>
<%
Dim reGroupSetting
Dim FoundGroup,FoundUserPermission,FoundGroupPermission
FoundGroup=false
FoundUserPermission=false
FoundGroupPermission=false

set rs=Dvbbs.Execute("select * from dv_UserAccess where uc_boardid="&request("boardid")&" and uc_userid="&request("userid"))
if not (rs.eof and rs.bof) then
	reGroupSetting=rs("uc_Setting")
	FoundGroup=true
	FoundUserPermission=true
end if

if not foundgroup then
set rs=Dvbbs.Execute("select * from dv_BoardPermission where boardid="&request("boardid")&" and groupid="&DVbbs.UserGroupID)
if not(rs.eof and rs.bof) then
	reGroupSetting=rs("PSetting")
	FoundGroup=true
	FoundGroupPermission=true
end if
end if

if not foundgroup then
set rs=Dvbbs.Execute("select * from dv_usergroups where usergroupid="&DVbbs.UserGroupID)
if rs.eof and rs.bof then
	response.write "未找到该用户组！"
	response.end
else
	FoundGroup=true
	FoundGroupPermission=true
	reGroupSetting=rs("GroupSetting")
end if
end if
%>
<table width="100%" border="0" cellspacing="1" cellpadding="0" align=center>
<FORM METHOD=POST ACTION="?action=saveuserpermission">
<input type=hidden name="userid" value="<%=request("userid")%>">
<input type=hidden name="BoardID" value="<%=request("boardid")%>">
<input type=hidden name="username" value="<%=Dvbbs.membername%>">
<%If Dvbbs.BoardID <> 0 Then%>
<tr> 
<td width="100%" class=td1 colspan=2 height=25>
<font color=blue>保存目标</font>：<input type=radio class=radio name="savetype" value=0 checked>该版面&nbsp;<input type=radio class=radio name="savetype" value=1>所有版面&nbsp;<input type=radio class=radio name="savetype" value=2>相同分类下所有版面（不包括分类）&nbsp;<input type=radio class=radio name="savetype" value=3>相同分类下所有版面（包括分类）&nbsp;<input type=radio class=radio name="savetype" value=4>同分类同级别版面
</td>
</tr>
<tr> 
<td width="100%" class=td1 colspan=2 height=25>
<font color=blue>
这里指的分类仅指一级分类，而不是该版面的上级版面</font>，比如您目前设置的是一个五级版面，选择了相同分类下所有版面都更新，那么这里将更新包括该分类的一级、二级、三级、四级所有版面，如果您担心更新范围太大，可以选择更新同分类同级别版面。
</td>
</tr>
<%Else%>
<input type=hidden name="savetype" value=0>
<%End If%>
<tr> 
<td height="23" colspan="2" class=td1><input type=radio class=radio name="isdefault" value="1" <%if FoundGroupPermission then%>checked<%end if%>><B>使用用户组默认值</B> (注意: 这将删除任何之前所做的自定义设置)</td>
</tr>
<tr> 
<td height="23" colspan="2"  class=td1><input type=radio class=radio name="isdefault" value="0" <%if FoundUserPermission then%>checked<%end if%>><B>使用自定义设置</B> &nbsp;(<font color=blue>选择自定义才能使以下设置生效</font>)</td>
</tr>
<%
GroupPermission(reGroupSetting)
%>
<input type=hidden value="yes" name="groupaction">
</FORM>
</table>
</td></tr>
<%
	end if
End Sub

Sub SaveUserPermission()
	Dim i
	response.write "<tr><th colspan=8 style=""text-align:center;"">编辑用户 "&request("username")&" 权限</th></tr>"
	if not isnumeric(request("userid")) then
		response.write "<tr><td colspan=8 class=td1>错误的用户参数。</td></tr>"
		founderr=true
	end if
	if not isnumeric(request("boardid")) then
		response.write "<tr><td colspan=8 class=td1>错误的版面参数。</td></tr>"
		founderr=true
	end if
	if not founderr then
	dim myGroupSetting,rs
	Dim IsGroupSetting,MyIsGroupSetting,FoundSetting
	myGroupSetting=GetGroupPermission
	select case request("savetype")
	'当前版面
	case "0"
		if request("isdefault")=1 then
			Dvbbs.Execute("delete from dv_UserAccess where uc_boardid="&request("boardid")&" and uc_userid="&request("userid"))
			Set Rs=Dvbbs.Execute("Select Count(*) from dv_UserAccess where uc_boardid="&request("boardid")&" and uc_userid="&request("userid"))
			FoundSetting=Rs(0)
			If IsNull(FoundSetting) Or FoundSetting="" Then FoundSetting=0
			If Dvbbs.BoardID > 0 Then
			Set Rs=Dvbbs.Execute("select IsGroupSetting From Dv_Board Where BoardID="&request("boardid"))
			If Trim(Rs(0))="" Or I