<%
' db connection
function conecta(nombre_db)
dim conn, connstring
set conn = server.createobject("ADODB.connection")
connstring = "provider = microsoft.jet.OLEDB.4.0; data source = " & server.mappath("../"&nombre_db)
'conecta=connstring
''conecta= server.mappath("../"&nombre_db)
end function
' funciones---------
Function Send_cdo_Mail(From,Rcpt,Subject,Body) ' added 2007/12/05
sch = "http://schemas.microsoft.com/cdo/configuration/"
Set cdoConfig = CreateObject("CDO.Configuration")
With cdoConfig.Fields
.Item(sch & "sendusing") = 2 ' cdoSendUsingPort
.Item(sch & "smtpserver") = "64.8.218.13"
.update
End With
Set cdoMessage = CreateObject("CDO.Message")
With cdoMessage
Set .Configuration = cdoConfig
.From = From
.To = Rcpt
.Subject = Subject
'.TextBody = Body ' text/plain format
.HTMLBody = Body ' text/html format
.Send
End With
Set cdoMessage = Nothing
Set cdoConfig = Nothing
end function
function login_DB (user, pass,cc)
qry = "SELECT id,username,password FROM usernames where username= '"&user&"' and password = '"&pass&"';"
set rs = cc.execute(qry)
if rs.EOF then
response.redirect "default.asp?bad_user=1"
response.End()
else
session("username") = rs("username")
session("user_id") = rs("id")
response.redirect "home.asp"
end if
' obj destruction
rs.close
set rs = nothing
cc.close
set cc = nothing
end function
'bet
function check_bet(user,ID,tipo,cc)
if tipo=1 then
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID &" AND Name= '"& user &"'"
else
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID
end if
'response.Write(qry)
set rs = cc.execute (qry)
if rs.EOF then
strout=false
else
strout= true
end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
check_bet= strout
end function
Function StoreInDB()
' Store information in database...
' AODB
Dim DataConn, cmdDC, rsDC
Dim Item
Dim iFieldCount, iLoopVar
Dim strLTorGT, iCriteria, strSortBy, strOrder
Dim DB_CONNECTIONSTRING
' Create recordset
Set rsDC = Server.CreateObject("ADODB.Recordset")
DB_CONNECTIONSTRING = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.Mappath("superbowlgameparty.mdb")
'rsDC.Open "tblValidKeys", DB_CONNECTIONSTRING, adOpenStatic, adLockPessimistic, adCmdTable
rsDC.Open "tblContacts", DB_CONNECTIONSTRING, 3, 2, &H0002
rsDC.AddNew
rsDC.Fields("To") = request.form("to")
rsDC.Fields("Title") = request.form("title")
rsDC.Fields("Name") = request.form("FirstName")
rsDC.Fields("LastName") = request.form("LastName")
rsDC.Fields("Company") = request.form("company")
rsDC.Fields("Address") = request.form("address")
rsDC.Fields("City") = request.form("city")
rsDC.Fields("State") = request.form("state")
rsDC.Fields("Zip") = request.form("zip")
rsDC.Fields("Phone") = request.form("phone")
rsDC.Fields("Emailaddr") = request.form("emailaddr")
rsDC.Fields("Whichcompany") = request.form("whichcompany")
rsDC.Fields("ReturnType") = request.form("returntype")
rsDC.Fields("Comments") = request.form("comments")
rsDC.Fields("Subject") = strSubject
rsDC.Fields("Redirect") = strRedir
rsDC.Fields("Date") = Now()
' (session("username"), session("user_id")
' new data from bet
rsDC.Fields("sb_user_id") =session("user_id")
rsDC.Fields("sb_username") =session("username")
rsDC.Fields("sb_squares") = request.form("Squares")
rsDC.Fields("sb_scorebet") = request.form("ScoreBet")
rsDC.Fields("sb_score") = request.form("Score")
rsDC.Fields("sb_winbet") = request.form("WinBet")
rsDC.Fields("sb_winner") = request.form("Winner")
rsDC.Fields("sb_winby") = request.form("WinBy")
rsDC.Update
' Close Data Access Objects and free DB variables
'rsDC.Close
'Set rsDC = Nothing
' can't do a "cmdDC.Close" !
'Set cmdDC = Nothing
End Function
function list_user_bets(user,ID,cc)
qry = "SELECT ID, Name, LastName, sb_user_id FROM tblContacts where sb_user_id= "& ID
ini =" " & vbCrLf
fin ="
"& vbcrlf
no_bet ="You have no bet | " & vbCrLf
salida=""
set rs = cc.execute (qry)
if rs.EOF then
salida=ini&no_bet & fin
else
salida=ini
while not rs.EOF
salida= salida &ini&""& rs("Name")& " "&rs("lastName") &" | "& fin & vbCrLf
rs.movenext
wend
salida=salida
list_user_bets= salida
end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
end function
' avoid sql injection
function limpia(t)
dim tt
tt=t
tt=replace(tt,"""","")
tt=replace(tt,"'","")
tt=replace(tt,"--","")
' convendria tambien un tt=server.htmlencode(tt)
limpia=tt
end function
function create_new_user(nombre,password,email,cc)
'qry = "INSERT INTO usernames (username, password, email) VALUES('"&nombre&"','"&password&"','"&email&"')"
qry="INSERT INTO usernames (username, password, email) VALUES('"&nombre&"','"&password&"','"&email&"')"
response.Write(qry)
set rs = cc.execute (qry)
'obj destruction
rs.close
set rs = nothing
cc.close
set cc = nothing
end function
'------------------------------------------------------------------------------
Function create_new_user2()
' Store information in database...
' AODB
Dim DataConn, cmdDC, rsDC
Dim Item
Dim iFieldCount, iLoopVar
Dim strLTorGT, iCriteria, strSortBy, strOrder
Dim DB_CONNECTIONSTRING
nombre=request.Form("new_user")
password=request.Form("new_password")
email=request.Form("new_email")
' Create recordset
Set rsDC = Server.CreateObject("ADODB.Recordset")
DB_CONNECTIONSTRING = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.Mappath("superbowlgameparty.mdb")
'rsDC.Open "tblValidKeys", DB_CONNECTIONSTRING, adOpenStatic, adLockPessimistic, adCmdTable
rsDC.Open "usernames", DB_CONNECTIONSTRING, 3, 2, &H0002
rsDC.AddNew
rsDC.Fields("username") = nombre
rsDC.Fields("password") = password
rsDC.Fields("email") = email
rsDC.Update
' Close Data Access Objects and free DB variables
rsDC.Close
Set rsDC = Nothing
' can't do a "cmdDC.Close" !
Set cmdDC = Nothing
'response.Write("ok")
End Function
'------------------------------------------------------------------------------
function check_user(user,tipo,cc)
if tipo=1 then
qry = "SELECT id,username FROM usernames where username='"& trim(user) &"'"
else
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID
end if
'response.Write(qry)
set rs = cc.execute (qry)
if rs.EOF then
strout=false
else
strout= true
end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
check_user= strout
end function
function select_last(user,ID,cc)
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID &" AND sb_username= '"& user &"'"
'response.Write(qry)
'response.End()
set rs = cc.execute (qry)
if not rs.EOF then
select_last=rs("ID")
else
select_last=0
end if
end function
function mail_template(data)
pl= pl & "" & vbCrLf
pl= pl & " " & vbCrLf
pl= pl & " ![]() | " & vbCrLf
pl= pl & "
" & vbCrLf
pl= pl & " " & vbCrLf
pl= pl & "
" & vbCrLf
pl= pl & data & vbCrLf
pl= pl & " | " & vbCrLf
pl= pl & "
" & vbCrLf
pl= pl & " " & vbCrLf
pl= pl & " | " & vbCrLf
pl= pl & "
" & vbCrLf
pl= pl & "
"
mail_template=pl
end function
%>