api_response.asp

来自「实现一个用JSP、Servlet技术实现的小型物流网站系统。实现功能如下：管理员」· ASP 代码 · 共 441 行 · 第 1/2 页

	If Not IsObject(conn) Then link_database
	Set rs = server.CreateObject("adodb.recordset")
	sql = "select * from [oblog_user] where UserName='" & UserName & "' "
	rs.Open sql, conn, 1, 3
	If Not (rs.bof And rs.EOF) Then 
			If rs("PassWord")=PassWord Then
				If rs("lockuser") = 1 Then
					rs.Close: Set rs = Nothing
					ErrMsg= ("对不起，你的ID已被锁定,不允许登录！"): FoundErr=True:Exit Sub
				Else
					rs("LastLoginIP") = userip
					rs("LastLoginTime") = ServerDate(Now())
					rs("LoginTimes") = rs("LoginTimes") + 1
					If oblog.CacheConfig(4)<>"" And oblog.CacheConfig(5) = 1 Then
							'启用二级域名
						userurl = Trim(rs("user_domain")) & "." & Trim(rs("user_domainroot"))
					Else
							'未启用二级域名则从根目录开始访问，不包含域名
							'userurl= trim(oblog.setup(3,0)) & trim(rs("user_dir")) & "/" & trim(rs("userid")) & "/index." & f_ext
						userurl = blogdir & Trim(rs("user_dir")) & "/" & Trim(rs("user_folder")) & "/index." & f_ext
					End If
					rs.Update
'					oblog.SaveCookie UserName, PassWord, CookieDate, userurl
'					SaveSession syskey,UserName,PassWord,""
					rs.Close: Set rs = Nothing
				End If
			Else 
				rs.Close: Set rs = Nothing
				ErrMsg= ("用户名或者密码错误！"): FoundErr=True:Exit Sub 
			End If
	Else
			rs.Close: Set rs = Nothing
			ErrMsg= ("用户名不存在！"): FoundErr=True:Exit Sub
	End If
End Sub  
'oblog用户整合的登出函数
Sub LogoutUser()
	If FoundErr=True Then Exit Sub
	If cookies_domain <> "" Then
        response.Cookies(cookies_name).domain = cookies_domain
    End If
	Response.Cookies(cookies_name)("username")=oblog.CodeCookie("")
	Response.Cookies(cookies_name)("password")=oblog.CodeCookie("")
	Response.Cookies(cookies_name)("userurl")=oblog.CodeCookie("")
End Sub 
'oblog用户整合的更新用户资料函数
Sub ModifyUserInfo()
	Call GetXML()
	If UserName="" Then 
		ErrMsg=("用户名不能为空！")
		FoundErr=True
		Exit Sub 
	End If
	Dim rs
	if not IsObject(conn) then Link_DataBase
	set rs=server.CreateObject("adodb.recordset")
	rs.open "select * from oblog_user where UserName='" & UserName & "'",conn,1,3
	If Not rs.eof Then 
		If Email<>"" Then rs("useremail")=Email
		If PassWord<>"" Then rs("PassWord")=md5(PassWord)
		If Question<>"" Then  rs("Question")=Question
		If Answer<>""   Then  rs("Answer")=md5(Answer)
		If Sex<>"" And IsNumeric(Sex) Then  rs("Sex")=Sex
		If QQ<>"" And IsNumeric(QQ) Then  rs("QQ")=QQ
		If TrueName<>"" Then  rs("TrueName")=TrueName
		If Birthday<>"" Then  rs("Birthday")=Birthday
		If TelePhone<>"" And IsNumeric(TelePhone) Then  rs("tel")=TelePhone
		If HomePage<>"" Then  rs("HomePage")=HomePage
		If MSN<>"" Then  rs("MSN")=MSN
		If province<>"" Then  rs("province")=province
		If city<>"" Then  rs("city")=city
		If address<>"" Then  rs("address")=address
		If UserStatus<>"" Then
			If UserStatus=0 Then 
				rs("Lockuser")=0
			Else 
				rs("Lockuser")=1
			End If 
		End If 
		rs.update
		rs.close
'	Else 
'		ErrMsg=("用户名不存在")
'		FoundErr=True
'		Exit Sub 
	End If 
	set rs=Nothing
End Sub 
'oblog用户整合的删除用户函数   
Sub DelUser()
	Dim rs,i
	If UserName="" Then
		ErrMsg= ("用户名不能为空(不能大于14小于4)！")
		FoundErr=True
		Exit Sub
	End If 
	If InStr(UserName,",")>0 Then
		UserName=Split(UserName,",")
		For i=0 To UBound(UserName)
			deloneuser(UserName(i))
		Next
	Else
		deloneuser(UserName)
	End If
End Sub
'同上
Sub Deloneuser(UserName)
	If UserName="" Then 
		ErrMsg=("用户名不能为空！")
		FoundErr=True
		Exit Sub 
	End If
	Dim rs,fso,f,uname,udir,userid
	Set rs=oblog.execute("select user_dir,UserName,user_folder,userid from oblog_user where UserName='" & UserName & "'")
	If Not rs.eof Then
		udir=rs(0)
		uname=rs(1)
		userid=rs(3)
		Set fso=server.createobject(oblog.CacheCompont(1))
		If fso.FolderExists(server.MapPath(blogdir & udir&"/"&rs("user_folder"))) then 
			Set f = fso.GetFolder(server.MapPath(blogdir & udir&"/"&rs("user_folder")))
			f.delete True
		End If
		Set f=Nothing
		Set fso=Nothing
		oblog.execute("delete from oblog_log where userid="&userid)
		oblog.execute("delete from oblog_comment where userid="&userid)
		oblog.execute("delete from oblog_message where userid="&userid)
		oblog.execute("delete from oblog_subject where userid="&userid)
		oblog.execute("delete from oblog_user where userid=" & userid)
		oblog.execute("delete from oblog_upfile where userid=" & userid)
		oblog.execute("delete from oblog_friend where userid=" & userid)
		oblog.execute("update oblog_pm set dels=1 where sender='" &UserName&"'")
	End If
	Set rs=Nothing
End Sub
'oblog用户整合的获取用户信息函数
Sub getuserinfo()
	If UserName="" Then 
		ErrMsg=("用户名不能为空！")
		FoundErr=True
		Exit Sub 
	End If
	Dim rs,sql
	If Not IsObject(conn) Then link_database
	Set rs = server.CreateObject("adodb.recordset")
	sql = "select * from [oblog_user] where UserName='" & UserName & "'"
	rs.Open sql, conn, 1, 1
	If Not rs.eof Then 
			blogAPI.UserName=UserName
			blogAPI.PassWord=rs("password")
			blogAPI.CookieDate=CookieDate
			blogAPI.EMail=rs("useremail")
			blogAPI.Question=rs("question")
			blogAPI.Answer=rs("answer")
			blogAPI.Sex=rs("Sex")
			blogAPI.QQ=rs("QQ")
			blogAPI.MSN=rs("MSN")
			blogAPI.userstatus=rs("lockuser")
			blogAPI.truename=rs("TrueName")
			blogAPI.birthday=rs("Birthday")
			blogAPI.homepage=rs("HomePage")
			blogAPI.telephone=rs("Tel")
			blogAPI.address=rs("address")
			blogAPI.province=rs("province")
			blogAPI.city=rs("city")
			blogAPI.userip=oblog.userip
			blogAPI.GetUser
	Else 
			ErrMsg=("用户名不存在！")
			FoundErr=True
			Exit Sub
	End If 
	rs.close
	Set rs=Nothing
End Sub 
'接收提交过来的XML数据
Sub GetXML()
	On Error Resume Next
	PassWord=XMLdom.documentElement.selectSingleNode("//password").text
	CookieDate=XMLdom.documentElement.selectSingleNode("//savecookie").text
	userip=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//userip").text)
	EMail=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//email").text)
	Question=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//question").text)
	Answer=XMLdom.documentElement.selectSingleNode("//answer").text
	Sex=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//gender").text)
	QQ=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//qq").text)
	MSN= oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//msn").text)
	userstatus=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//userstatus").text)
	truename=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//truename").text)
	birthday=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//birthday").text)
	homepage=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//homepage").text)
	telephone=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//telephone").text)
	province=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//province").text)
	city=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//city").text)
	address=oblog.filt_badstr(XMLdom.documentElement.selectSingleNode("//address").text)
End Sub 
'验证提交信息的合法性，目前oblogMD5文件为16位，只能验证提交的位数再判定（考虑新版本增加参数）
Function ChkSyskey()
	ChkSyskey=True
	syskey=LCase(syskey)
	If Len(syskey)=32 Then 
		If Mid(syskey,9,16)<>MD5(UserName&oblog_Key) Then
			ErrMsg=("安全码验证未通过！")
			FoundErr=True
			ChkSyskey=False
		End If 
	ElseIf Len(syskey)=16 Then 
		If syskey<>MD5(UserName&oblog_Key) Then
			ErrMsg=("安全码验证未通过！")
			FoundErr=True
			ChkSyskey=False
		End If 
	Else 
		ErrMsg=("安全码不合法！")
		FoundErr=True
		ChkSyskey=False
	End If 	
End Function 
%>