sendpass.asp

一套开源WEB的网站管理系统

<!--#include file="../conn.asp"-->
<!--#include file="../inc/const.asp"-->
<!--#include file="../inc/email.asp"-->
<!--#include file="../inc/md5.asp"-->
<!--#include file="head.inc"-->
<script language="JavaScript">locationid.innerHTML = "找回密码";</script>
<%
Dim Founderr,useremail
Dim topic,mailbody,sendmsg
Dim answer,repassword,username,password
Dim Rs,sql
Dim Errmsg,Sucmsg

Founderr = False
If Not IsObject(Conn) Then ConnectionDatabase

Response.Write "<br>"
Founderr = False
If Founderr Then
	Response.Write "<script>alert('" & Errmsg & "');history.go(-1)</script>"
Else
	If Trim(Request("action")) = "step1" Then
		Call step1
	ElseIf Trim(Request("action")) = "step2" Then
		Call step2
	ElseIf Trim(Request("action")) = "step3" Then
		Call step3
	Else
		Call main
	End If
	If Founderr Then Response.Write "<script>alert('" & Errmsg & "');history.go(-1)</script>"
End If

Sub step1()
	If Newasp.checkpost = False Then
		Errmsg = Errmsg + "您提交的数据不合法，请不要从外部提交发言。"
		Founderr = True
		Exit Sub
	End If
	If Trim(Request("username")) = "" Then
		Founderr = True
		Errmsg = Errmsg + "请输入您的用户名。"
		Exit Sub
	Else
		UserName = Newasp.CheckBadstr(Request("username"))
	End If
	If CInt(Newasp.IsCloseMail) = 1 Then
		Set Rs = Newasp.Execute("SELECT * FROM [NC_User] WHERE username='" & UserName & "'")
	Else
		Set Rs = Newasp.Execute("SELECT * FROM [NC_User] WHERE username='" & UserName & "'")
	End If
	If Rs.EOF And Rs.bof Then
		Founderr = True
		Errmsg = Errmsg + "您输入的用户名并不存在，请重新输入。或者由于该系统不支持邮件发送，只能通过联系站长获得密码。"
	Else
		If Rs("UserGrade") = 999 Then
			Founderr = True
			Errmsg = Errmsg + "找回密码失败，请和管理员联系取回密码。"
			Set Rs = Nothing
			Exit Sub
		End If
		If Rs(13) = "" Or IsNull(Rs(13)) Then
			Founderr = True
			Errmsg = Errmsg + "该用户没有填写密码问题及答案，只有填写的用户方能继续。"
		Else
			Response.Write "<form action=""sendpass.asp?action=step2"" method=""post""> "
			Response.Write "<table cellpadding=4 cellspacing=1 align=center class=UserTableBorder2>"
			Response.Write " <tr>"
			Response.Write " <th valign=middle colspan=2 align=center height=25>取回密码（第二步：回答问题）</th></tr>"
			Response.Write " <tr>"
			Response.Write " <td valign=middle class=Usertablerow2><b>问