<% Dim login, Email, objCon, Password, SQL,banned Dim hisIP, banIP, Mem, regStatus, objRS, allowSigpicture, allowShortMsg Dim signature,saysomething, sigpicture, profilePic, profilePicURL, customTitle, moderated,homepage Email = SQLstrip(request("email")) password = SQLstrip(request("password")) login = SQLstrip(request("login")) banned = request("banned") banIP = request("banIP") Mem = request("Mem") hisIP = request("hisIP") regStatus = request("regStatus") allowSigpicture = request("allowSigpicture") allowShortMsg = request("allowShortMsg") homepage = request.form("homepage") signature = SQLin(request("signature")) saysomething = SQLin(request("saysomething")) sigpicture = request("sigpicture") profilePic = request("profilePic") profilePicURL = request("profilePicURL") customTitle = SQLAccessInput(request("customTitle")) moderated = request.form("moderated") if signature<>"" then signature = SQLAccessInput(signature) if saysomething<>"" then saysomething = SQLAccessInput(saysomething) banned = CheckedOrNot(banned) allowSigpicture = CheckedOrNot(allowSigpicture) allowShortMsg = CheckedOrNot(allowShortMsg) moderated = CheckedOrNot(moderated) if replace(homepage,"http://","") = "" then homepage="" else homepage = SQLAccessInput(homepage) set objCon = server.CreateObject("adodb.connection") with objCon .open datastore SQL = "UPDATE pgd_members SET Login = '"&login&"', Email='"&Email&_ "', banned = "&banned&", regStatus = "®Status&", "&_ "allowSigpicture = "&allowSigpicture&", allowShortMsg = "&allowShortMsg&", signature = '"&signature&_ "', saysomething = '"&saysomething&"', profilePic = '"&profilePic&_ "', profilePicURL = '"&profilePicURL&"', customTitle = '"&customTitle&"', moderated = "&moderated&_ ", homepage='"&homepage&"'" if allowSigpicture = 0 then _ SQL = SQL & ", sigpicture = ''" SQL = SQL & " WHERE Mem = "&Mem .execute SQL, , adCmdText + adExecuteNoRecords If banIP = "on" then Dim IPbanning if IsNull(Application(dbName&"bannedIP")) or Application(dbName&"bannedIP") = "" then _ IPbanning = hisIP else IPbanning = Application(dbName&"bannedIP")&"|"&hisIP SQL = "UPDATE pgd_config SET bannedIP = '"&IPbanning&"'" .execute SQL, , adCmdText + adExecuteNoRecords Application.lock Application(dbName&"bannedIP") = IPbanning Application.unlock end if .close end with set objCon = nothing set objRS = server.CreateObject("adodb.recordset") objRS.open dbOwnerPrefix&"spGetTotalMem", datastore, , , adCmdStoredProc Application.lock Application(dbName&"totalMem") = objRS.fields("totalMem") Application.unlock objRS.close set objRS = nothing response.redirect ("admin_userdetail.asp?done=yes&id="&Mem) %>