<%dim action,userinfo,burn,sql
action=request.querystring("action")
if lguserid="" or isnull(lguserid) then response.redirect"login.asp"
select case action
case"myinfo"
set rs=conn.execute("select*from [user] where userid="&lguserid&" and not del")
userinfo=rs("userinfo")
userinfo=split(userinfo,"|")
burn=userinfo(2)
burn=split(burn,"-")
session(prefix&"regtime")=userinfo(9)
%>
<%case"edit"
dim password,repassword,email,sex,burn1,burn2,burn3,home,qq,gxqm,picw,pich,bbspic,mypic,toupic
dim canreg,z,sickpass,regtime,userid,newuserinfo,bad,b,diyname
function checkbad(str)
if isnull(str) then exit function
bad=split(application(prefix&"badcontent"), "|")
for b=0 to ubound(bad)
str=Replace(str,bad(b),string(len(bad(b)),"*"))
next
checkbad=str
end function
email=Replace(Request.Form("email"),"'","''")
sex=checknum(request.form("sex"))
burn1=replace(Request.Form("burn1"),"'","")
burn2=replace(Request.Form("burn2"),"'","")
burn3=replace(Request.Form("burn3"),"'","")
home=Replace(Request.Form("home"),"'","''")
home=ubbg(home)
qq=Replace(Request.Form("qq"),"'","''")
gxqm=Request.Form("gxqm")
gxqm=Replace(left(gxqm,255),"'","''")
gxqm=replace(gxqm,"|","│")
gxqm=checkbad(gxqm)
if checknum(session(prefix&"tempgrade"))>=1 then
diyname=Request.Form("diyname")
diyname=Replace(left(diyname,8),"'","")
diyname=replace(diyname,"|","│")
diyname=checkbad(diyname)
end if
picw=Replace(Request.Form("picw"),"'","''")
pich=Replace(Request.Form("pich"),"'","''")
mypic=Replace(Request.Form("mypic"),"'","''")
mypic=ubbg(mypic)
bbspic=Replace(Request.Form("bbspic"),"'","''")
canreg=true
if email="" or sex="" then
canreg=false
mes="·请填写完整必填的资料。 "
else
mes=""
email=server.HTMLEncode(email)
if not IsValidEmail(email) then canreg=false : mes=mes&"·你的E-mail填写错误。 "
end if
burn=burn1&"-"&burn2&"-"&burn3
if not isdate(burn) then burn="--"
if qq<>"" and (not isnumeric(qq) or (len(qq)<5 or len(qq)>12)) then canreg=false:mes=mes&"·你的 QQ 号码填写错误。 "
if mypic="" then
toupic=""&styleid&"/headpic/"&bbspic&".gif|"&checknum(application(prefix&"autopicw"))&"|"&checknum(application(prefix&"autopich"))
else
if picw<>"" and checknum(picw)<=checknum(application(prefix&"picw")) and pich<>"" and checknum(pich)<=checknum(application(prefix&"pich")) then
toupic=mypic&"|"&picw&"|"&pich
else
canreg=false
mes=mes&"·你的头像大小设置错误。 "
end if
end if
if checknum(application(prefix&"headpicset"))<>1 and instr(toupic,"://")>0 then
canreg=false
mes=mes&"·本论坛不允许使用外部头像。 "
end if
if canreg=false then
tl=" 修 改 失 败"
mes="对不起！你不能成功地修改资料,可能存在以下问题。 "&mes&"· 返回重新填写。"
elseif canreg=true then
'修改
userinfo=email&"|"&home&"|"&burn&"|"&qq&"|"&sex&"|"&toupic&"|"&gxqm&"|"&split(conn.execute("select userinfo from [user] where userid ="&lguserid&"")(0),"|")(9)&"|"&diyname
'结束
conn.execute("update [user] set userinfo='"&userinfo&"' where userid="&lguserid&"")
tl=" 修 改 成 功"
mes="你的资料修改成功。"
end if
call sendinfo(tl,mes)
%>
<%case"mypwd"%>
<%case"editpwd"
dim oldpwd,newpwd,repwd,canedit
oldpwd=Replace(Request.Form("oldpwd"),"'","''")
newpwd=Replace(Request.Form("newpwd"),"'","''")
repwd=Replace(Request.Form("repwd"),"'","''")
canedit=true
if oldpwd="" or newpwd="" or repwd="" then
canedit=false
mes="·请填写完整必填的资料。 "
else
mes=""
if md5(oldpwd)<>lgpwd then canedit=false:mes=mes&"·你填写的旧密码不正确。 "
if len(newpwd)>16 then canedit=false : mes=mes&"·你填写的新密码长度超过了16。 "
if passc(newpwd)=false then canedit=false:mes=mes&"·你的新密码含有非法字符。 "
sickpass=split("123$$1234$$12345$$123456$$1234567$$12345678$$aaa$$111","$$")
for i=0 to ubound(sickpass)
if len(newpwd)<3 or newpwd=sickpass(i) then
canedit=false
mes=mes&"·你的新密码属于弱口令，请更换密码。 "
exit for
end if
next
if repwd<>newpwd then canedit=false : mes=mes&"·你两次输入的密码不一样。 "
end if
'限制用户名密码不能相同
if newpwd=lgname then
canreg=false
mes=mes&"·你的密码属于弱口令，请更换密码。 "
end if
'结束
if canedit=false then
tl=" 修 改 失 败"
mes="对不起！你不能成功修改你的密码,可能存在以下问题。 "&mes&"· 返回重新填写。"
elseif canedit=true then
newpwd=md5(newpwd)
conn.execute("update [user] set [password]='"&newpwd&"' where userid="&lguserid&"")
Response.Cookies(prefix)("lgpwd")=newpwd
if lgcook>0 then
Response.Cookies(prefix).Expires=date+lgcook
end if
tl=" 修 改 成 功"
mes="你的密码修改成功。"
end if
call sendinfo(tl,mes)
%>
<%end select
call down%>