save.asp

一个网络相册

<% option explicit %>
<!--#include file="../function1/DBOpen.asp"-->
<!--#include file="../function/md5.asp"-->
<%
Function  isemail(strng)
        isemail  =  false
        Dim  regEx,  Match
        Set  regEx  =  New  RegExp
        regEx.Pattern  =  "^\w+((-\w+)|(\.\w+))*\@[A-Za-z0-9]+((\.|-)[A-Za-z0-9]+)*\.[A-Za-z0-9]+$"
        regEx.IgnoreCase  =  True
        Set  Match  =  regEx.Execute(strng)
if  match.count  then  isemail=  true
End  Function

dim name,rs,sql,pass,pass1,sex,email,qq,address,homepage,date1,content,insertsql,turename,addnum,loginnum,attest,purview,lastlogin,userip
	  
	  userip = Request.ServerVariables("HTTP_X_FORWARDED_FOR") 
      If userip = "" Then 
	  userip = Request.ServerVariables("REMOTE_ADDR") 
	  end if
if trim(request.form("turename"))="" then
	    response.write "错误!请输入你的姓名! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
end if

if trim(request.form("name"))="" or trim(request.form("password"))="" or trim(request.form("password1"))=""    then
	    response.write "错误!帐号或密码不能为空! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
else 
name=trim(request.form("name"))
turename=trim(request.form("turename")) 		 		
pass=trim(request.form("password")) 
pass1=trim(request.form("password1")) 
end if 

if len(name)<2 then 
	    response.write "用户名不得小于两个字符! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
end if

if len(name)>20 then 
	    response.write "用户名不得大于二十个字符! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
end if

if len(pass)<5 then 
	    response.write "密码不得小于五位! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
end if

if pass<>pass1    then
	    response.write "两次输入密码不一样,请重新输入! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
end if

if trim(request.form("email"))<>"" then
   email=trim(request.form("email"))
   if isemail(email)<>true then 
	    response.write "email格式不对,请重新输入! <a href=# onclick='javascript:window.history.go(-1)'>返回</a>"
        response.end
   end if
end if
'=============================================================

if request.form("active")="add" then '*****************************增加用户******************************
sql="select * from users where name='"&name&"'"
set rs=conn.execute(sql)
	if not rs.eof or not rs.bof then
	response.write "您的用户名已经被注册&nbsp;<a href=reg.asp>重新注册</a>"
	response.end
	else 
	sex=trim(request.form("sex"))
	email=trim(request.form("email"))
	qq=trim(request.form("qq"))
	address=trim(request.form("address"))
	homepage=trim(request.form("homepage"))
	date1=now()
	addnum=0
	loginnum=1
	lastlogin=now()
	content=server.htmlencode(request.form("content"))
	insertsql="insert into users(name,turename,pwd,sex,email,address,time1,homepage,content,oicq,purview,lock,loginnum,addnum,lastlogin,userip) values('"&name&"','"&turename&"','"&pass&"',"&sex&",'"&email&"','"&address&"',#"&date1&"#,'"&homepage&"','"&content&"','"&qq&"','"&purview&"',1,'"&loginnum&"','"&addnum&"','"&lastlogin&"','"&userip&"')"
	conn.execute(insertsql)
	conn.close
	set conn=nothing
		          session("purview")=purview
			      session("name")=name
			      session("turename")=turename
			      Session.Timeout = 10
			      response.redirect "../index.asp"
	end if
else   '*****************************编辑用户******************************
         sql="select * from users where name='"&name&"'"
	     set rs=server.createobject("ADODB.recordset") 
         rs.Open sql,conn,1,3 
	pass=trim(request.form("password"))
	sex=trim(request.form("sex"))
	email=trim(request.form("email"))
	qq=trim(request.form("qq"))
	address=trim(request.form("address"))
	homepage=trim(request.form("homepage"))
	content=server.htmlencode(request.form("content"))
	rs("pwd")=MD5(pass)
	rs("turename")=turename
	rs("sex")=sex
	rs("email")=email
	rs("oicq")=qq
	rs("address")=address
	rs("homepage")=homepage
	rs("content")=content
	rs.update
	rs.close
	set rs=nothing
	response.redirect "userinfo.asp?user="&name&""
end if
%>