usercenter_inc.asp

来自「网店批发系统,很好很强大,很好很强大很好很强大」· ASP 代码 · 共 227 行

<%
	Response.Buffer = True 
	Response.ExpiresAbsolute = Now() - 1 
	Response.Expires = 0 
	Response.CacheControl = "no-cache" 
	Response.AddHeader "Pragma", "No-Cache" 

	dim i,j,action,Username,PassWord,act,Message,OldPass,NewPass,ReturnUrl,DingDanStage
	dim UserInfo,DingDan,LiuYan,Pinglun,News,ID,Num,PinglunNum,Timenow,MsgFrom,MsgTo,MsgContent
	dim UserIdcard,UserEmail,UserTrueName,UserAddress,UserCode,UserTel,UserPhone,UserQQ
	dim DataName
	dim MsgDetail(3)
	
	DataName = "条订单"
	PageNum = 10
	Timenow = now()
	
	Num = 0
	
	action = sqlchg(Request.QueryString("action"))
	ID = sqlcheck(Request.QueryString("ID"))
	act = sqlchg(Request.QueryString("act"))
	DingDanStage = sqlchg(Request("DingDanStage"))
	
	Username = Session("UserName")
	'读取标题
	dim center_info
	center_info = shop.connectXml(XML,"/language/leftcenter")
	dim center
	center = shop.connectXml(XML,"/language/center")
	
	Message = center_info(0)
	ReturnUrl = "UserCenter.asp?action="&action
'**************************************************************************************************		
	if action = "UserInfo" then
		if act = "save" then
		
			UserIdcard = sqlchg(Request.Form("UserIdcard"))
			UserEmail = sqlchg(Request.Form("UserEmail"))
			UserTrueName = sqlchg(Request.Form("UserTrueName"))
			UserAddress = sqlchg(Request.Form("UserAddress"))
			UserCode = sqlchg(Request.Form("UserCode"))
			UserTel = sqlchg(Request.Form("UserTel"))
			UserPhone = sqlchg(Request.Form("UserPhone"))
			UserQQ = sqlchg(Request.Form("UserQQ"))
			UserFace = sqlchg(Request.Form("UserFace"))
		
			conn1.execute("Update [User] set UserIdcard='"&UserIdcard&"',UserEmail='"&UserEmail&"',UserTrueName='"&UserTrueName&"',UserAddress='"&UserAddress&"',UserCode='"&UserCode&"',UserTel='"&UserTel&"',UserPhone='"&UserPhone&"',UserQQ='"&UserQQ&"',UserFace='"&UserFace&"' where UserName = '"&Username&"'")
			
			Response.Write("<script language='javascript'>alert('修改成功');window.location.href='"&ReturnUrl&"';</script>")
			Response.End()
		end if 
		
		Message = center_info(1)
		set rs = conn1.execute("Select UserFlag,UserJifen,UserLogin,UserRegDate,UserSex,UserTrueName,UserAddress,UserCode,UserTel,UserPhone,UserQQ,UserIdcard,UserEmail,UserQQ,UserFace from [User] where Username = '"&Username&"'")
		UserInfo = rs.getrows
		'判断会员类别
		if Cint(UserInfo(0,0)) = 0 then
			UserInfo(0,0) = "普通会员"
		else
			UserInfo(0,0) = "VIP会员"
		end if
	end if
'**************************************************************************************************		
	if action = "DingDan" then
		if act = "del" then
			conn1.execute("Delete from [Order] where OrderNumber = '"&ID&"' and OrderUsername = '"&Username&"'")
			Response.Write("<script language='javascript'>alert('删除成功');window.location.href='"&ReturnUrl&"';</script>")
			Response.End()	
		end if
		Message = center_info(2)
		set rs = conn1.execute("Select distinct orderNumber,orderDate,orderStage from [Order] where OrderUsername = '"&Username&"' order by orderDate desc")
		if not rs.eof then
			DingDan = rs.getrows
			i = ubound(DingDan,2)
			if not isnumeric(i) then
				i = 1
			end if
		else
			i = -1
		end if
	end if
'**************************************************************************************************	
	if action = "PassWord" then				
		if act = "save" then	
		
			OldPass = md5(sqlchg(Request.Form("NewPass1")))
			NewPass = md5(sqlchg(Request.Form("NewPass2")))
		
			'判断旧密码
			if OldPass <> NewPass then
				Response.Write("<script language='javascript'>alert('两次密码不一样');window.location.href='"&ReturnUrl&"';</script>")
				Response.End()
			end if
			'修改密码
			conn1.execute("Update [User] set UserPass = '"&NewPass&"' where Username = '"&Username&"'")
			Response.Write("<script language='javascript'>alert('修改成功');window.location.href='"&ReturnUrl&"';</script>")
			Response.End()
		end if
		
		Message = center_info(3)
		set rs = conn1.execute("Select Userpass from [User] where Username = '"&Username&"'")
		PassWord = rs(0)
	end if
'**************************************************************************************************		
	if action = "VIP" then
		Message = center_info(4)
		set rs = conn1.execute("Select NewsContent from News where Newsid = 19")
		News = rs(0)
	end if
'**************************************************************************************************		
	if action = "LiuYan" then
	
		if act = "add" then
		
			MsgTo = sqlchg(Request.Form("MsgTo"))
			MsgContent = sqlchg(Request.Form("MsgContent"))
			
			conn1.execute("Insert into Message (MsgFrom,MsgTo,MsgContent,MsgDate,MsgType) values ('"&Username&"','"&MsgTo&"','"&MsgContent&"','"&Timenow&"','0')")
			Response.Write("<script language='javascript'>alert('发送成功');window.location.href='"&ReturnUrl&"';</script>")
			Response.End()
		end if
		if act = "view" then
			set rs = conn1.execute("Select MsgFrom,MsgContent,MsgDate,MsgTo from Message where MsgID = "&Cint(ID)&"")
			MsgDetail(0) = rs(0)
			MsgDetail(1) = rs(1)
			MsgDetail(2) = rs(2)
			MsgDetail(3) = rs(3)
			'记录
			conn1.execute("Update Message set MsgReaded = 1 where MsgID = "&Cint(ID)&"")
		end if
		if act = "del" then
			conn1.execute("Delete from Message where MsgID = "&Cint(ID)&"")
		end if
	
		DataName = "条信息"
		PinglunNum = 0
		
		set rs = conn1.execute("Select MsgID,MsgFrom,MsgTo,MsgDate,MsgReaded from Message where MsgType = 0 and MsgTo = '"&Username&"' order by MsgID desc")
		if not rs.eof then
			Pinglun = rs.getrows
			PinglunNum = ubound(Pinglun,2)
			if not isnumeric(PinglunNum) then
				PinglunNum = 1
			end if	
		else
			PinglunNum = -1		
		end if
		
		Message = center_info(5)
		
	end if
'**************************************************************************************************		
	if action = "Pinglun" then
		DataName = "条评论"
		PinglunNum = 0
		
		if act = "del" then
			conn1.execute("Delete from Message where MsgID = "&Cint(ID)&"")
			Response.Write("<script language='javascript'>alert('删除成功');window.location.href='"&ReturnUrl&"';</script>")
			Response.End()
		end if
		
		set rs = conn1.execute("Select m.MsgID,p.ProductName,m.MsgFrom,m.MsgDate,p.ProductID from Message m inner join Product p on m.ProductID = p.ProductID where m.MsgType = 1 and m.MsgFrom = '"&Username&"' order by m.MsgID desc")
		if not rs.eof then
			Pinglun = rs.getrows
			PinglunNum = ubound(Pinglun,2)
			if not isnumeric(PinglunNum) then
				PinglunNum = 1
			end if
		else
			PinglunNum = -1
		end if

		Message = center_info(6)
		
	end if
'**************************************************************************************************	
	if action = "ViewDingDan" then
		if act = "edit" then
			'判断是否完成订单
			set rs = conn1.execute("Select o.OrderStage,o.OrderProductID,o.OrderCount,o.OrderUsername,p.ProductJifen from [Order] o inner join Product p on o.OrderProductID = p.ProductID where o.OrderNumber = '"&ID&"'")
			DingDan = rs.getrows
			i = ubound(DingDan,2)

			if DingDan(0,0) = 3 then
				'先减库存
				for j = 0 to i
					conn1.execute("Update Product set ProductNum = ProductNum - "&Cint(DingDan(2,j))&" where ProductID = "&Cint(DingDan(1,j))&"")
					'计算积分
					Num = Num + Cint(DingDan(2,j))*Cint(DingDan(4,j))
				next
				'加会员积分
				conn1.execute("Update [User] set UserJifen = UserJifen + "&Cint(Num)&" where UserName = '"&DingDan(3,0)&"'")
				'记录本次交易
				conn1.execute("Update [Order] set OrderJifen = "&Num&" where OrderNumber = '"&ID&"' and OrderUsername = '"&Username&"'")
				conn1.execute("Update [Order] set OrderStage = OrderStage + 1 where OrderNumber = '"&ID&"' and OrderUsername = '"&Username&"'")
				Response.Write("<script language='javascript'>alert('修改订单状态成功');window.location.href='"&ReturnUrl&"&ID="&ID&"';</script>")
				Response.End()
			end if
			'如果没完成
			if Cint(DingDanStage) = 1 then
				conn1.execute("Update [Order] set OrderStage = OrderStage + 1 where OrderNumber = '"&ID&"' and OrderUsername = '"&Username&"'")
				Response.Write("<script language='javascript'>alert('修改订单状态成功');window.location.href='"&ReturnUrl&"&ID="&ID&"';</script>")
				Response.End()
			end if
		end if
	
		Message = center_info(8)
		
		'读订单
		set rs = conn1.execute("Select o.orderProductID,o.orderCount,p.ProductPrice1,p.ProductPrice2,p.ProductName,o.Content,o.orderStage,o.OrderTotalNum,o.OrderJifen,o.zhifu,o.songhuo from [Order] o inner join Product p on o.orderProductID = p.ProductID where OrderNumber = '"&ID&"'")
		if not rs.eof then	
			DingDan = rs.getrows
			i = ubound(DingDan,2)
		else
			Response.Write("商品已删除")
			Response.End()
		end if
		'读用户资料
		set rs = conn1.execute("Select UserTrueName,UserAddress,UserCode,UserQQ,UserTel,Userzhifu,Usersonghuo from [User] where Username = '"&UserName&"'")
		if not rs.eof then
			UserInfo = rs.getrows
		end if
	end if
'**************************************************************************************************	
%>