%@ LANGUAGE = "VBScript" ENABLESESSIONSTATE = True %>
<%Option Explicit%>
<%Response.Buffer = True%>
<%
'***********************************************************
'** Copyright Notice **
'** Tassietek - MailerPro **
'** Copyright 2001-2004 Tassietek All Rights Reserved. **
'***********************************************************
'** PREVENT PAGE FROM BEING CACHED
Response.Expires = -1
Response.ExpiresAbsolute = Now() - 2
Response.AddHeader "pragma","no-cache"
Response.AddHeader "cache-control","private"
Response.CacheControl = "No-Store"
'** CHECKING TO SEE IF LOGGED IN IF NOT TAKE YOU TO THE LOGIN PAGE
If Request.Cookies("login") = "" Then
Response.Cookies("action") = "error"
Response.Write("")
Response.End
Elseif Request.Cookies("login") = "2" Then
Response.Redirect"default.asp"
Elseif Request.Cookies("login") = "3" Then
Response.Redirect"sendemail.asp"
End If
If Session("Start") = "" Then
Response.Cookies("a") = "ended"
Response.Redirect"login.asp?logoff=1"
End If
%>
<%
'** ASSIGN VARIABLES
Dim strdenied
Dim rs
Dim sql
'** DELETE A USER
If Request("action") = "delete" Then
sql = "Delete From " & tbl_prefix & "users Where ID = " & Request("ID")
conn.execute(sql)
If err <> 0 Then
Response.Write""
err.clear
Response.End
End If
End If
'** ADD A USER
If Request("action") = "adduser" Then
Set rs = conn.execute("SELECT * FROM " & tbl_prefix & "users WHERE pass_word = '" & Request("fldpassword") & "' Or username = '" & Request("fldusername") & "'")
If err <> 0 Then
Response.Write""
err.clear
Response.End
End If
If rs.EOF Then
sql = "Insert Into " & tbl_prefix & "users "
sql = sql & "(name,username,pass_word,lastaccessed,securitylevel) "
sql = sql & "Values("
sql = sql & "'" & Trim(Request("fldusersfullname")) & "',"
sql = sql & "'" & Trim(Request("fldusername")) & "',"
sql = sql & "'" & Trim(Request("fldpassword")) & "',"
sql = sql & FormatDatabaseDate(SetDate(Now())) & ","
sql = sql & Request("fldsecuritylevel") & ")"
conn.execute(sql)
If err <> 0 Then
Response.Write""
err.clear
Response.End
End If
rs.close
Set rs = nothing
Else
strdenied = "User Name and or Password already in use, try another!"
End If
End If
%>
<%
Set rs = conn.execute("Select * From " & tbl_prefix & "users")
If err <> 0 Then
Response.Write""
err.clear
Response.End
End If
If Not rs.EOF Then
Do While Not rs.EOF
%>
<%=rs("name")%>
<%=rs("username")%>
<%=rs("pass_word")%>
<%=rs("securitylevel")%>
<%=DisplayDate(rs("lastaccessed"))%>
<% If Not rs("main") = 1 Then %>');"><% End If %>
<% If Not rs("main") = 1 Then %>','edit','width=400,height=173'); if (document.all){newwin.moveTo(0,0);}"><% End If %>
<%
rs.MoveNext
Loop
rs.Close
Set rs = nothing
Else
%>
No users Exist.
<%
End If
%>
User [<%=Request.Cookies("user")%>]
Powered by <%=version%>
<%
'** ASSURING THAT ALL DATABASE CONNECTIONS ARE CLOSED
On Error Resume Next
rs.close
Set rs = nothing
rsfun.close
Set rsfun = nothing
conn.close
Set conn = nothing
on error goto 0
%>