1
Hi
Iam facing a problem in my project, developing a web site for online shopping in ASP on windows XP using IIS server.
All the validations are ok but the new password is not upadated in the data base and also showing a error page.
the operating system we used is Windows XP,
the source code is ASP,
front end we used - HTML and
javascript and vb script for validations.
the inputs we used are :
old pasword :
new password :
confirm your new password :
and SUBMIT button
we have used two files
in first page we give option for changepassword when the user clicks this option then he gets the page with above mentioned inputs , this is all written in one file changepass.asp the code of the file changepass.asp is as follows:
<%
'option explicit
Response.Buffer = True
Response.Expire s = 0
%>
<html>
<head>
<title> Login Screen </title>
</head>
<body>
<form name="login" action="changep ass2.asp" method="post">
<input type=button value=" <<BACK " name=butt1 onClick="window .location='logi n.asp'">
<table align=center border=3 cellpadding="3" cellspacing=0>
<tr>
<th colspan=2 bgcolor=black>
<font face=verdana color=red size=+1><b> Change Password </font>
</th>
</tr>
<tr>
<td>
<font face=verdana><b >Enter user name :
</td>
<td>
<input type="text" name="user" size="20">
</td>
</tr>
<tr>
<td>
<font face=verdana><b > Enter old password :
</td>
<td>
<input type="password" name="pwd" size="20">
</td>
</tr>
<tr>
<td>
<font face=verdana><b > Enter new Password :
</td>
<td>
<input type="password" name="pwd2" size="20">
</td>
</tr>
<tr>
<td>
<font face=verdana><b > Re-enter new Password :
</td>
<td>
<input type="password" name="pwd3" size="20">
</td>
</tr>
<tr>
<th colspan="2">
<input type="submit" value=" CHANGE ">
</th>
</tr>
</table>
</form>
<script language="javas cript">
document.login. user.focus();
</script>
</body>
</html>
Then now when he submits after filling the inputs thenthe page shifts to the changepass2.asp file and the code of changepass2 is as follows:
<%
Response.Buffer = True
Dim Uid,Pwd,UserTyp e
Dim ChkUser, ChkUserRS
Uid = request.form("u ser")
Pwd = request.form("p wd")
Pwd2 = request.form("p wd2")
Pwd3 = request.form("p wd3")
if pwd2 <> pwd3 then
Response.Write "<html><bod y background='../jpgfiles/logo10poorer.jp g'>" &_
"<font face='comic sans ms' color=red> <center><h2>N ew Password mismatch" &_
"</h2> <Br> <h3>Please try again.</h3><br>" &_
"<br><Br><B r> <font face='comic sans ms' color=blue><a href='javascrip t:history.go(-1)'><h3>BACK> ></a></h3></body></html>"
Response.End
end if
on error resume next %>
<!-- #include file="include.a sp"-->
<% con.begintrans
set productrs = server.CreateOb ject("ADODB.REC ORDSET")
ChkUser = "SELECT UserID,PWD,TYPE FROM eusers WHERE upper(UserID)=' " & ucase(uid) & "' AND pWD='" & pwd & "'"
set ChkUserRS = Con.Execute(Chk User)
UserType = ucase(ChkUserRS ("type"))
if err.number <> 0 then
Response.Write "<h2><center><f ont face='courier new' Color='red'>AN error occured while connecting to the database<br></center><br>"
Response.Write "<h2><center><f ont face='courier new' Color='red'><a href='mailto:hy pers@hd2.dot.ne t.in?subject=Re porti ng an error in your website&bodyfor mat=0&body=The following error occured in your site:-'>Please Mail us About this Error<br></center><br></a>"
Response.Write "<a href='login.asp '><h2><center>< font face='courier new' Color='red'>Cli ck here to Continue</a>"
con.rollbacktra ns
Response.end
end if
if not chkuserRS.eof then
Response.Write ucase(uid) & ucase(pwd)
if ucase(uid) = ucase(chkuserRS (0)) and ucase(pwd) = ucase(chkuserRS (1)) then
UpdateQry = "UPDATE eusers SET PWD = '" & pwd2 & "' WHERE upper(UserID)=' " & ucase(uid) & "' AND upper(PWD)='" & pwd & "'"
Con.execute(Upd ateQry)
con.committrans
session("user") = chkuserRS(0)
session("utype" ) = UserType
Con.close
set con = nothing
Response.Write usertype
if UserType = ucase("adm") or UserType = ucase("seller") then
Response.Redire ct "eshop0.asp "
Response.End
elseif UserType = ucase("buyer") then
Response.Redire ct "../search/lframe2.asp"
Response.End
end if
end if
end if
Con.close
set con = nothing
Response.Write usertype & "usertype"
Response.Write "<html><bod y background='../jpgfiles/cmp.jpg'>" &_
"<font face='comic sans ms' color=red> <center><h2>Inc orrect User Name or PassWord!!!" &_
"</h2> <Br> <h3>Please try again.</h3><br>" &_
"<br><Br><B r> <font face='comic sans ms' color=blue><a href='javascrip t:history.go(-1)'><h3>BACK> ></a></h3></body></html>"
%>
please check this code or else if u have any code plss sent it to me .. please do reply me
thanking you
sincerely
roshina
