card.asp

九酷网络个人主页系统破解版

<!--#include file="config.asp"-->
<!--#include file="chkuser.asp"-->
<%
if request.form("username")="" or request.form("card1")="" or request.form("card2")=""Then WriteErrMsg("您的输入有误！")
payuser=htmlencode2(request.form("username"))
If conn.Execute("Select userid From [user] where username='"&payuser&"'").eof Then WriteErrMsg("输入的充值帐号不存在！")
card1=replace(trim(request.form("card1")),"'","")
card2=replace(trim(Request.form("card2")),"'","")
sql="select * from card where carid='"&card1&"'and carpws='"&card2&"' and used=0"
rs.open sql,conn,1,3
if rs.eof and rs.bof then
WriteErrMsg("该充值卡不存在或已经失效！")
else
paymoney=rs("paymoney")
rs("paydate")=Now()
rs("payuser")=payuser
rs("used")=1
rs.update
set rs1=Server.CreateObject("ADODB.Recordset")
sql1="select * from [user] where username='"&payuser&"'"
rs1.open sql1,conn,1,3
rs1("money")=rs1("money")+paymoney
rs1.update
Response.Write("<script>alert('充值成功，本次操作充值"&paymoney&"元');location.href='pay.asp?pay=card'</script>")
rs.close  
rs1.close
set rs=nothing     
set rs1=nothing 
end if
%>