<%
'#################################################################################
'## Copyright (C) 2000-02 Michael Anderson, Pierre Gorissen,
'## Huw Reddick and Richard Kinser
'##
'## This program is free software; you can redistribute it and/or
'## modify it under the terms of the GNU General Public License
'## as published by the Free Software Foundation; either version 2
'## of the License, or any later version.
'##
'## All copyright notices regarding Snitz Forums 2000
'## must remain intact in the scripts and in the outputted HTML
'## The "powered by" text/logo with a link back to
'## http://forum.snitz.com in the footer of the pages MUST
'## remain visible when the pages are viewed on the internet or intranet.
'##
'## This program is distributed in the hope that it will be useful,
'## but WITHOUT ANY WARRANTY; without even the implied warranty of
'## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
'## GNU General Public License for more details.
'##
'## You should have received a copy of the GNU General Public License
'## along with this program; if not, write to the Free Software
'## Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
'##
'## Support can be obtained from support forums at:
'## http://forum.snitz.com
'##
'## Correspondence and Marketing Questions can be sent to:
'## reinhold@bigfoot.com
'##
'## or
'##
'## Snitz Communications
'## C/O: Michael Anderson
'## PO Box 200
'## Harpswell, ME 04079
'#################################################################################
%>
<%
Response.Write " " & vbNewLine & _
" " & vbNewLine & _
" " & getCurrentIcon(strIconFolderOpen,"","") & " " & fLang(strLangPassword00010) & "
" & vbNewLine & _
" " & getCurrentIcon(strIconBar,"","") & getCurrentIcon(strIconFolderOpenTopic,"","") & " " & fLang(strLangPassword00020) & "
" & vbNewLine & _
" |
" & vbNewLine & _
"
" & vbNewLine
if lcase(strEmail) <> "1" then
Response.Redirect("default.asp")
end if
if Request.Form("mode") <> "DoIt" and Request.Form("mode") <> "UpdateIt" and Request.QueryString("pwkey") = "" then
call ShowForm
elseif Request.QueryString("pwkey") <> "" and Request.Form("mode") <> "UpdateID" then
key = chkString(Request.QueryString("pwkey"),"SQLString")
'###Forum_SQL
strSql = "SELECT M_PWKEY, MEMBER_ID, M_NAME, M_EMAIL "
strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS "
strSql = strSql & " WHERE M_PWKEY = '" & key & "'"
set rsKey = my_Conn.Execute (strSql)
if rsKey.EOF or rsKey.BOF then
'Error message to user
Response.Write " " & fLang(strLangPassword00030) & "
" & vbNewLine & _
" " & fLangN(strLangPassword00040, "" & "|" & "") & "
" & vbNewLine & _
" " & fLang(strLangPassword00050) & "
" & vbNewLine
elseif strComp(key,rsKey("M_PWKEY")) <> 0 then
'Error message to user
Response.Write " " & fLang(strLangPassword00030) & "
" & vbNewLine & _
" " & fLangN(strLangPassword00040, "" & "|" & "") & "
" & vbNewLine & _
" " & fLang(strLangPassword00050) & "
" & vbNewLine
else
PWMember_ID = rsKey("MEMBER_ID")
call showForm2
end if
rsKey.close
set rsKey = nothing
elseif Request.Form("pwkey") <> "" and Request.Form("mode") = "UpdateIt" then
key = chkString(Request.Form("pwkey"),"SQLString")
'###Forum_SQL
strSql = "SELECT M_PWKEY, MEMBER_ID, M_NAME, M_EMAIL "
strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS "
strSql = strSql & " WHERE M_PWKEY = '" & key & "'"
set rsKey = my_Conn.Execute (strSql)
if rsKey.EOF or rsKey.BOF then
'Error message to user
Response.Write " " & fLang(strLangPassword00030) & "
" & vbNewLine & _
" " & fLangN(strLangPassword00040, "" & "|" & "") & "
" & vbNewLine & _
" " & fLang(strLangPassword00050) & "
" & vbNewLine
elseif strComp(key,rsKey("M_PWKEY")) <> 0 then
'Error message to user
Response.Write " " & fLang(strLangPassword00030) & "
" & vbNewLine & _
" " & fLangN(strLangPassword00040, "" & "|" & "") & "
" & vbNewLine & _
" " & fLang(strLangPassword00050) & "
" & vbNewLine
else
if trim(Request.Form("Password")) = "" then
Err_Msg = Err_Msg & "" & fLang(strLangPassword00060) & ""
end if
if Len(Request.Form("Password")) > 25 then
Err_Msg = Err_Msg & "" & fLang(strLangPassword00070) & ""
end if
if Request.Form("Password") <> Request.Form("Password2") then
Err_Msg = Err_Msg & "" & fLang(strLangPassword00080) & ""
end if
if Err_Msg = "" then
strEncodedPassword = sha256("" & Request.Form("Password"))
pwkey = ""
'Update the user's password
strSql = "UPDATE " & strMemberTablePrefix & "MEMBERS "
strSql = strSql & " SET M_PASSWORD = '" & chkString(strEncodedPassword,"SQLString") & "'"
strSql = strSql & ", M_PWKEY = '" & chkString(pwkey,"SQLString") & "'"
strSql = strSql & " WHERE MEMBER_ID = " & cLng(Request.Form("MEMBER_ID"))
my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
else
if Err_Msg <> "" then
Response.Write " " & fLang(strLangPassword00090) & "
" & vbNewLine & _
" " & vbNewLine & _
" " & vbNewLine & _
" | " & vbNewLine & _
"
" & vbNewLine & _
"
" & vbNewLine & _
" " & fLang(strLangPassword00100) & "
" & vbNewLine
rsKey.close
set rsKey = nothing
WriteFooter
Response.End
end if
end if
Response.Write " " & fLang(strLangPassword00110) & "
" & vbNewLine & _
" " & fLang(strLangPassword00120)
if strAuthType = "db" then Response.Write fLang(strLangPassword00130)
Response.Write ".
" & vbNewLine
Response.Write " " & vbNewLine
Response.Write " " & fLang(strLangPassword00050) & "
" & vbNewLine
end if
rsKey.close
set rsKey = nothing
else
Err_Msg = ""
if trim(Request.Form("Name")) = "" then
Err_Msg = Err_Msg & "" & fLang(strLangPassword00140) & ""
end if
if trim(Request.Form("Email")) = "" then
Err_Msg = Err_Msg & "" & fLang(strLangPassword00150) & ""
end if
'## Forum_SQL
strSql = "SELECT MEMBER_ID, M_NAME, M_EMAIL FROM " & strMemberTablePrefix & "MEMBERS "
strSql = strSql & " WHERE M_NAME = '" & ChkString(Trim(Request.Form("Name")), "SQLString") &"'"
strSql = strSql & " AND M_EMAIL = '" & ChkString(Trim(Request.Form("Email")), "SQLString") &"'"
set rs = my_Conn.Execute (strSql)
if rs.BOF and rs.EOF then
Err_Msg = Err_Msg & "" & fLang(strLangPassword00160) & ""
else
PWMember_ID = rs("MEMBER_ID")
PWMember_Name = rs("M_NAME")
PWMember_Email = rs("M_EMAIL")
end if
rs.close
set rs = nothing
if Err_Msg = "" then
pwkey = GetKey("none")
'Update the user Member Level
strSql = "UPDATE " & strMemberTablePrefix & "MEMBERS "
strSql = strSql & " SET M_PWKEY = '" & chkString(pwkey,"SQLString") & "'"
strSql = strSql & " WHERE MEMBER_ID = " & PWMember_ID
my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
if lcase(strEmail) = "1" then
'## E-mails Message to the Author of this Reply.
strRecipientsName = PWMember_Name
strRecipients = PWMember_Email
strFrom = strSender
strFromName = strForumTitle
strsubject = fLangN(strLangPassword00170, strForumTitle) & " "
strMessage = fLangN(strLangPassword00180,PWMember_Name) & vbNewline & vbNewline
strMessage = strMessage & fLangN(strLangPassword00190,strForumTitle) & vbNewline & vbNewline
strMessage = strMessage & fLang(strLangPassword00200) & vbNewline & vbNewLine
strMessage = strMessage & strForumURL & "password.asp?pwkey=" & pwkey & vbNewline & vbNewline
strMessage = strMessage & vbNewLine & fLang(strLangPassword00210) & vbNewLine & vbNewLine
%>
<%
end if
else
if Err_Msg <> "" then
Response.Write " " & fLang(strLangPassword00090) & "
" & vbNewLine & _
" " & vbNewLine & _
" " & vbNewLine & _
" | " & vbNewLine & _
"
" & vbNewLine & _
"
" & vbNewLine & _
" " & fLang(strLangPassword00100) & "
" & vbNewLine
WriteFooter
Response.End
end if
end if
Response.Write " " & fLang(strLangPassword00220) & "
" & vbNewLine & _
" " & fLangN(strLangPassword00230, ChkString(PWMember_Email,"email")) & "
" & vbNewLine
Response.Write " " & vbNewLine
Response.Write " " & fLang(strLangPassword00050) & "
" & vbNewLine
end if
WriteFooter
Response.End
sub ShowForm()
Response.Write "
" & vbNewLine
end sub
sub ShowForm2()
Response.Write "
" & vbNewLine
end sub
%>