<%@LANGUAGE="VBSCRIPT"%> <% '=============================================== ' Personals System 2002 ' ©2002 vSpin.net. www.vspin.net '=============================================== ' All rights reserved. ' Use of this code is covered by the terms and ' conditions in the license agreement. No ' unauthorized duplication or distribution is ' permitted. vSpin.net copyright notices must ' remain in the ASP sections of the code. '=============================================== %> <% ' *** Restrict Access To Page: Grant or deny access to this page Dim MM_authorizedUsers, MM_authFailedURL, MM_grantAccess MM_authorizedUsers="user,admin" MM_authFailedURL="login.asp" MM_grantAccess=false If Session("MM_Username") <> "" Then If (false Or CStr(Session("MM_UserAuthorization"))="") Or _ (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then MM_grantAccess = true End If End If If Not MM_grantAccess Then MM_qsChar = "?" If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&" MM_referrer = Request.ServerVariables("URL") if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString() MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer) Response.Redirect(MM_authFailedURL) End If %> <% dim xxxxm, rsheadUpdatee, rsheadUpdatee_numRows Dim rsVerifyMember, rsVerifyMember_numRows, user, subj, rsAd, rsAd_numRows, field1, field2, field3, field4, field5, rsignores, rsignores_numRows, Conn, pos, sql1 Function sqlsafe(s) pos = InStr(s, "'") While pos > 0 s = Mid(s, 1, pos) & "'" & Mid(s, pos + 1) pos = InStr(pos + 2, s, "'") Wend sqlsafe=s End Function Dim rsVerifyMember__MMColParam rsVerifyMember__MMColParam = "1" if (Request.Form("user") <> "") then rsVerifyMember__MMColParam = Request.Form("user") %> <% set rsVerifyMember = Server.CreateObject("ADODB.Recordset") rsVerifyMember.ActiveConnection = MM_conn_STRING rsVerifyMember.Source = "SELECT p_user, p_email, p_first, p_last, p_ban FROM p_users WHERE p_user = '" + Replace(rsVerifyMember__MMColParam, "'", "''") + "'" rsVerifyMember.CursorType = 0 rsVerifyMember.CursorLocation = 2 rsVerifyMember.LockType = 3 rsVerifyMember.Open() rsVerifyMember_numRows = 0 user = Request.Querystring("user") subj = Request.Querystring("subj") If NOT rsVerifyMember.EOF And NOT rsVerifyMember.BOF then p_ban= rsVerifyMember("p_ban") end if If (CStr(Request("MM_insert")) <> "") Then If request("subject") = "" then message=49 elseIf request("mess") = "" then message=50 elseIf rsVerifyMember.EOF And rsVerifyMember.BOF AND request("user") <> "Administration" Then writeno="y" elseIf NOT rsVerifyMember.EOF And NOT rsVerifyMember.BOF AND NOT p_ban = "" Then rsVerifyMember.close set rsVerifyMember = nothing MM_conn_STRING.close set MM_conn_STRING = nothing response.redirect("write.asp?message=44") elseIf NOT rsVerifyMember.EOF And NOT rsVerifyMember.BOF Or request("user") = "Administration" Then if request.form("a") = "true" AND rsSession("p_access") = "admin" OR rsSession("p_access") = "admin2" Then field1 = "Administration" else field1 = rsSession("p_user") end if field2 = request.form("user") field3 = request.form("mess") field4 = request.form("subject") field5 = request.form("inclu") set rsignores = Server.CreateObject("ADODB.Recordset") rsignores.ActiveConnection = MM_conn_STRING rsignores.Source = "SELECT p_user, p_ignore FROM p_ignores WHERE p_user = '" + Replace(field2, "'", "''") + "' AND p_ignore = '" + Replace(field1, "'", "''") + "'" rsignores.CursorType = 0 rsignores.CursorLocation = 2 rsignores.LockType = 3 rsignores.Open() rsignores_numRows = 0 If NOT rsignores.EOF And NOT rsignores.BOF then rsVerifyMember.close set rsVerifyMember = nothing MM_conn_STRING.close set MM_conn_STRING = nothing rsignores.close set rsignores = nothing response.redirect("default.asp?message=1") end if Set Conn = Server.CreateObject("ADODB.Connection") Conn.Open MM_conn_STRING sql1 = "insert into p_messages (field1,field2,field3,field4,field5) values('"& field1 & "','"& field2 & "','"& sqlsafe(field3) & "','"& sqlsafe(field4) & "','"& field5 & "')" conn.execute(sql1) If NOT request("user") = "Administration" Then uemail = rsVerifyMember("p_email") ufirst = rsVerifyMember("p_first") ulast = rsVerifyMember("p_last") body = "Hello " & ufirst & (" ") & ulast & vbCrLf & vbCrLf body = body & "You have received a new message. You can use the link below to login (if not already). After you are logged in click the Read Messages link to read your new message. " & vbCrLf & vbCrLf body = body & weburl & "login.asp" & vbCrLf Dim objCDO, objConfig set objCDO = createobject("cdo.message") set objConfig = createobject("cdo.configuration") ' Setting the SMTP Server Set Flds = objConfig.Fields Flds.Item("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2 Flds.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver") = "smtp.abac.com" Flds.update Set objCDO.Configuration = objConfig objCDO.To = uemail objCDO.From = webemail objCDO.Subject = "You have Received a New Message!" objCDO.TextBody = body objCDO.fields.update objCDO.Send set objCDO = nothing set objConfig = nothing conn.close set conn = nothing rsVerifyMember.close set rsVerifyMember = nothing End If if request.form("a") = "true" AND rsSession("p_access") = "admin" OR rsSession("p_access") = "admin2" AND request("subject") = "Warning from Administration" Then MM_conn_STRING.close set MM_conn_STRING = nothing response.redirect("admin.asp?mode=ban&message=1") elseif request.form("a") = "true" AND rsSession("p_access") = "admin" OR rsSession("p_access") = "admin2" Then MM_conn_STRING.close set MM_conn_STRING = nothing response.redirect("admin.asp?mode=reports&message=1") else MM_conn_STRING.close set MM_conn_STRING = nothing response.redirect("default.asp?message=1") end if End if End If %> <% if request("a") = "true" AND rsSession("p_access") = "admin" OR rsSession("p_access") = "admin2" Then rsAd__MMColParam = "Administration" else Dim rsAd__MMColParam rsAd__MMColParam = "1" if (Session("MM_Username") <> "") then rsAd__MMColParam = Session("MM_Username") end if set rsAd = Server.CreateObject("ADODB.Recordset") rsAd.ActiveConnection = MM_conn_STRING rsAd.Source = "SELECT p_user, p_active FROM p_ads WHERE p_user = '" + Replace(rsAd__MMColParam, "'", "''") + "'" rsAd.CursorType = 0 rsAd.CursorLocation = 2 rsAd.LockType = 3 rsAd.Open() rsAd_numRows = 0 %>

 Write Message

  
<% if request("a") = "true" then %> <% end if %> <% if not user = "" then %> <% elseif user = "" then %> <% end if %> <% if not subj = "" then %> <% elseif subj = "" then %> <% end if %> <% If Not rsAd.EOF Or Not rsAd.BOF Then %> <% if rsAd("p_active")=1 then %> <% else %> <% end if %> <% End If ' end Not rsAd.EOF Or NOT rsAd.BOF %>

From: 

Administration

To: 

To: 

" size="20">

Subject: 

<%= subj %>

Subject: 

" size="20"> (50 characters max)

Message: 

(2000 characters max)


Characters remaining:

checked<% end if %>> Click here to include your personals ad with the message.


Although all messages are sent, any user that may
have ignored you will not receive this message.

">

<% rsAd.close set rsad = nothing MM_conn_STRING.close set MM_conn_STRING = nothing %>