%@ Language=VBScript%>
<%
Response.Buffer=true
Response.Expires=0
%>
<%
userno=Request.QueryString("userno")
if userno="" then
userno=Session("userno")
else
if Session("userqx")>="1" and Session("userqx")<="9" then
else
userno=Session("userno")
end if
end if
if userno="" then Response.Redirect "user_login.asp"
myurl="user_center.asp?userno="&userno
tablename="userinfo"
face=Request.QueryString("face")
set cn = Server.CreateObject("ADODB.Connection")
cn.Open(mycnstr)
set rs = Server.CreateObject("ADODB.Recordset")
set rs2 = Server.CreateObject("ADODB.Recordset")
bz=1
if userno<>"" then
sqltext="select * from userinfo where userno="&userno
rs.Open sqltext,cn,1,3
if not rs.EOF then
realname=trim(rs("realname"))
state=rs("state")
picflag=trim(rs("picflag"))
picfile=trim(rs("picfile"))
creadate=rs("creadate")
grade=rs("grade")
amount=rs("amount")
creadate=rs("creadate")
updatetime=rs("updatetime")
logintime=rs("logintime")
querycount=rs("querycount")
if face<>"" then
if picflag="1" then
set fs=CreateObject("Scripting.FileSystemObject")
if picfile<>"" then
if fs.FileExists(server.MapPath("userfiles/"&picfile)) then
fs.DeleteFile(server.MapPath("userfiles/"&picfile))
end if
end if
end if
picflag="2"
picfile=face
rs("picflag")="2"
rs("picfile")=face
rs.Update
Response.Redirect(myurl)
end if
end if
rs.Close
end if
%>
<%
mybz=0
set rsb1 = Server.CreateObject("ADODB.Recordset")
set rsb2 = Server.CreateObject("ADODB.Recordset")
if Session("userno")="" then
c_usercode=Request.Cookies("usercode")
c_userpass=Request.Cookies("userpass")
c_loginflag=Request.Cookies("loginflag")
if c_usercode<>"" then
sql="select userno,userpass,flag,state,logintime,logincount,picfile,ipaddress from userinfo where usercode='"+c_usercode+"' and state='1'"
rsb1.Open sql,cn,1,3
if rsb1.EOF then
else
oldpass=Lcase(trim(rsb1(1)))
if oldpass=c_userpass then
mybz=1
rsb1("logintime")=now()
rsb1("logincount")=rsb1("logincount")+1
rsb1("ipaddress")=Request.ServerVariables("Remote_HOST")
rsb1.Update
Session("userno")=rsb1(0)
Session("usercode")=c_usercode
Session("userflag")=c_loginflag
userno=rsb1(0)
cn.Execute "delete from user_login where userno="&userno&" or keyno="&Session.SessionID
if databaseflag="access" then
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+c_usercode+"',now(),now(),'"+classcode+"','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
else
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+c_usercode+"',getdate(),getdate(),'"+classcode+"','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
end if
cn.Execute sql
end if
end if
rsb1.Close
end if
end if
if mybz=0 then
sql="select * from user_login where keyno="&Session.SessionID
rsb2.Open sql,cn,1,3
if not rsb2.EOF then
rsb2("updatetime")=now()
rsb2("classcode")=classcode
else
rsb2.Addnew
rsb2("keyno")=Session.SessionID
rsb2("userno")=0
rsb2("logintime")=now()
rsb2("updatetime")=now()
rsb2("loginflag")="0"
rsb2("ipaddress")=Request.ServerVariables("Remote_HOST")
rsb2("classcode")=classcode
end if
rsb2.Update
rsb2.Close
end if
%>