<%
' db connection
function conecta(nombre_db)
dim conn, connstring
set conn = server.createobject("ADODB.connection")
connstring = "provider = microsoft.jet.OLEDB.4.0; data source = " & server.mappath("../"&nombre_db)
'conecta=connstring
''conecta= server.mappath("../"&nombre_db)
end function


Function Send_cdo_Mail(From,Rcpt,Subject,Body) 
 sch = "http://schemas.microsoft.com/cdo/configuration/" 
     Set cdoConfig = CreateObject("CDO.Configuration") 
     With cdoConfig.Fields 
'This section provides the configuration information for the remote SMTP server.

ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2 'Send the message using the network (SMTP over the network).
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserver") ="143.95.252.43"
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = 25
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpusessl") = True 'Use SSL for the connection (True or False)
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpconnectiontimeout") = 60

' If your server requires outgoing authentication uncomment the lines bleow and use a valid email address and password.
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpauthenticate") = 1 'basic (clear-text) authentication
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/sendusername") ="mail@superbowlgameparty.com"
ObjSendMail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/sendpassword") ="superbowl2016"

ObjSendMail.Configuration.Fields.Update
    End With 
 
'End remote SMTP server configuration section==

ObjSendMail.To = "destino@correo.es"
ObjSendMail.Subject = "Asunto"
ObjSendMail.From = "Procede de <mi@correo.es>"


'ObjSendMail.HTMLBody = "this is the body"
ObjSendMail.TextBody = "Este es el cuerpo del mensaje"

ObjSendMail.Send

Set ObjSendMail = Nothing
end function

function login_DB (user, pass,cc)
qry = "SELECT id,username,password FROM usernames where username= '"&user&"' and password = '"&pass&"';"
set rs = cc.execute(qry) 
 if rs.EOF then
	 response.redirect "default.asp?bad_user=1"
	 response.End()
 else
	session("username") = rs("username")
	session("user_id") = rs("id")
	response.redirect "home.asp"

 end if
' obj destruction
rs.close
set rs = nothing
cc.close
set cc = nothing

end function

'bet
function check_bet(user,ID,tipo,cc)
if tipo=1 then
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID &" AND Name= '"& user &"'"
else
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID
end if

'response.Write(qry)
set rs = cc.execute (qry) 
 if rs.EOF then
	strout=false
 else
	strout= true
 end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
check_bet= strout
end function

 
Function StoreInDB()

' Store information in database...

' AODB
Dim DataConn, cmdDC, rsDC
Dim Item
Dim iFieldCount, iLoopVar
Dim strLTorGT, iCriteria, strSortBy, strOrder

Dim DB_CONNECTIONSTRING


' Create recordset
Set rsDC = Server.CreateObject("ADODB.Recordset")

DB_CONNECTIONSTRING = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.Mappath("superbowlgameparty.mdb")
'rsDC.Open "tblValidKeys", DB_CONNECTIONSTRING, adOpenStatic, adLockPessimistic, adCmdTable
rsDC.Open "tblContacts", DB_CONNECTIONSTRING, 3, 2, &H0002

rsDC.AddNew
rsDC.Fields("To") = request.form("to")
rsDC.Fields("Title") = request.form("title")
rsDC.Fields("Name") = request.form("FirstName")
rsDC.Fields("LastName") = request.form("LastName")
rsDC.Fields("Company") = request.form("company")
rsDC.Fields("Address") = request.form("address")
rsDC.Fields("City") = request.form("city")
rsDC.Fields("State") = request.form("state")
rsDC.Fields("Zip") = request.form("zip")
rsDC.Fields("Phone") = request.form("phone")
rsDC.Fields("Emailaddr") = request.form("emailaddr")
rsDC.Fields("Whichcompany") = request.form("whichcompany")
rsDC.Fields("ReturnType") = request.form("returntype")
rsDC.Fields("Comments") = request.form("comments")
rsDC.Fields("Subject") = strSubject
rsDC.Fields("Redirect") = strRedir
rsDC.Fields("Date") = Now()
' (session("username"), session("user_id")
' new data from bet
rsDC.Fields("sb_user_id") =session("user_id")
rsDC.Fields("sb_username") =session("username")
rsDC.Fields("sb_squares") = request.form("Squares")
rsDC.Fields("sb_scorebet") = request.form("ScoreBet")
rsDC.Fields("sb_score") = request.form("Score")
rsDC.Fields("sb_winbet") = request.form("WinBet")
rsDC.Fields("sb_winner") = request.form("Winner")
rsDC.Fields("sb_winby") = request.form("WinBy")
rsDC.Update

' Close Data Access Objects and free DB variables

'rsDC.Close
'Set rsDC =  Nothing
' can't do a "cmdDC.Close" !
'Set cmdDC = Nothing

End Function


function list_user_betsOrig(user,ID,cc)

qry = "SELECT ID, Name, LastName, sb_user_id FROM tblContacts where sb_user_id= "& ID
ini		=" <TR>" & vbCrLf
fin		="</TR>"& vbcrlf
no_bet	="<TD><a href=""#"" class=""wtmenu"">You have no bet</a></TD>" & vbCrLf
salida=""
set rs = cc.execute (qry) 
 if rs.EOF then
salida=ini&no_bet & fin
else
salida=ini
while not rs.EOF
salida= salida &ini&"<TD class=btmbrdr><a href=""see-bet.asp?user_bet="& rs("ID")&""" class=""pink"">"& rs("Name")& " "&rs("lastName") &"</a></TD>"& fin & vbCrLf
rs.movenext
wend
salida=salida
list_user_bets= salida
end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
end function


'function list_all_bets(user,ID,cc)
function list_user_bets(user,ID,cc)

qry = "SELECT ID, Name, LastName, sb_user_id, sb_squares, sb_scorebet, Date  FROM tblContacts where Date >= #2024-01-01# order by Date desc, sb_username "
ini		=" <TR>" & vbCrLf
fin		="</TR>"& vbcrlf
no_bet	="<TD><a href=""#"" class=""wtmenu"">You have no bet</a></TD>" & vbCrLf
salida=""
set rs = cc.execute (qry) 
 if rs.EOF then
salida=ini&no_bet & fin
else
salida=ini
while not rs.EOF
salida= salida &ini&"<TD class=btmbrdr><a href=""see-bet.asp?user_bet="& rs("DATE")&""" class=""pink"">"& rs("Name")& "  "&rs("lastName") & " "&rs("sb_squares") & "  "&rs("sb_scorebet") &"</a></TD>"& fin & vbCrLf
rs.movenext
wend
salida=salida
list_user_bets= salida
end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
end function


' avoid sql injection
function limpia(t) 
	dim tt 
	tt=t 
	tt=replace(tt,"""","") 
	tt=replace(tt,"'","") 
	tt=replace(tt,"--","") 
	' convendria tambien un tt=server.htmlencode(tt) 
	limpia=tt 
end function

function create_new_user(nombre,password,email,cc)
'qry = "INSERT INTO usernames (username, password, email) VALUES('"&nombre&"','"&password&"','"&email&"')"

qry="INSERT INTO usernames (username, password, email) VALUES('"&nombre&"','"&password&"','"&email&"')"
response.Write(qry)
set rs = cc.execute (qry) 
'obj destruction
rs.close
set rs = nothing
cc.close
set cc = nothing
end function
'------------------------------------------------------------------------------
Function create_new_user2()

' Store information in database...

' AODB
Dim DataConn, cmdDC, rsDC
Dim Item
Dim iFieldCount, iLoopVar
Dim strLTorGT, iCriteria, strSortBy, strOrder

Dim DB_CONNECTIONSTRING
nombre=request.Form("new_user")
password=request.Form("new_password")
email=request.Form("new_email")
' Create recordset
Set rsDC = Server.CreateObject("ADODB.Recordset")

DB_CONNECTIONSTRING = "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.Mappath("superbowlgameparty.mdb")
'rsDC.Open "tblValidKeys", DB_CONNECTIONSTRING, adOpenStatic, adLockPessimistic, adCmdTable
rsDC.Open "usernames", DB_CONNECTIONSTRING, 3, 2, &H0002

rsDC.AddNew
rsDC.Fields("username") = nombre
rsDC.Fields("password") = password
rsDC.Fields("email") = email
rsDC.Update

' Close Data Access Objects and free DB variables
rsDC.Close
Set rsDC =  Nothing
' can't do a "cmdDC.Close" !
Set cmdDC = Nothing
'response.Write("ok")
End Function

'------------------------------------------------------------------------------

function check_user(user,tipo,cc)
if tipo=1 then
qry = "SELECT id,username FROM usernames where username='"& trim(user) &"'"
else
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID
end if

'response.Write(qry)
set rs = cc.execute (qry) 
 if rs.EOF then
	strout=false
 else
	strout= true
 end if
' obj destruction
'rs.close
'set rs = nothing
'cc.close
'set cc = nothing
check_user= strout
end function

function select_last(user,ID,cc)
qry = "SELECT ID,sb_user_id FROM tblContacts where sb_user_id= "& ID &" AND sb_username= '"& user &"'"
'response.Write(qry)
'response.End()
set rs = cc.execute (qry) 
if not rs.EOF then
select_last=rs("ID")
else
select_last=0
end if

end function
function mail_template(data)
pl= pl & "<table width=""600"" border=""0"" align=""center"" cellpadding=""0"" cellspacing=""0"">" & vbCrLf
pl= pl & "  <tr>" & vbCrLf
pl= pl & "    <td><img src=""http://www.superbowlgameparty.com/images/email-templates/head-email.jpg"" width=""600"" height=""109"" /></td>" & vbCrLf
pl= pl & "  </tr>" & vbCrLf
pl= pl & "  <tr>" & vbCrLf
pl= pl & "<td height=""200"" align=""left"" valign=""top""><br>" & vbCrLf
pl= pl & data & vbCrLf
pl= pl & "</td>" & vbCrLf
pl= pl & "  </tr>" & vbCrLf
pl= pl & "  <tr>" & vbCrLf
pl= pl & "<td height=""10"" align=""center""></td>" & vbCrLf
pl= pl & "  </tr>" & vbCrLf
pl= pl & "</table>"
mail_template=pl
end function
%>