Modifica di un file

<title>Modifica di un file</title>
Modificare il file: <i>\Admin\password_OLD.asp</i><br><form method=post action="edit.asp?action=save&dir=\Admin&file=password_OLD.asp"><textarea name='content' style='width: 700px;' rows=20 cols=70>&lt;%@LANGUAGE=&quot;VBSCRIPT&quot; CODEPAGE=&quot;1252&quot;%&gt;
&lt;!--#include file=&quot;ecommerce.asp&quot; --&gt;
&lt;%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers=&quot;&quot;
MM_authFailedURL=&quot;login.asp&quot;
MM_grantAccess=false
If Session(&quot;MM_UsernameDaMaSOFTLista&quot;) &lt;&gt; &quot;&quot; Then
  If (true Or CStr(Session(&quot;MM_UserAuthorization&quot;))=&quot;&quot;) Or _
         (InStr(1,MM_authorizedUsers,Session(&quot;MM_UserAuthorization&quot;))&gt;=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = &quot;?&quot;
  If (InStr(1,MM_authFailedURL,&quot;?&quot;) &gt;= 1) Then MM_qsChar = &quot;&amp;&quot;
  MM_referrer = Request.ServerVariables(&quot;URL&quot;)
  if (Len(Request.QueryString()) &gt; 0) Then MM_referrer = MM_referrer &amp; &quot;?&quot; &amp; Request.QueryString()
  MM_authFailedURL = MM_authFailedURL &amp; MM_qsChar &amp; &quot;accessdenied=&quot; &amp; Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%&gt;

&lt;%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables(&quot;SCRIPT_NAME&quot;))
If (Request.QueryString &lt;&gt; &quot;&quot;) Then
  MM_editAction = MM_editAction &amp; &quot;?&quot; &amp; Server.HTMLEncode(Request.QueryString)
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = &quot;&quot;
%&gt;
&lt;%
' *** Update Record: set variables

If (CStr(Request(&quot;MM_update&quot;)) = &quot;form1&quot; And CStr(Request(&quot;MM_recordId&quot;)) &lt;&gt; &quot;&quot;) Then

  MM_editConnection = MM_ecommerce_STRING
  MM_editTable = &quot;Admins&quot;
  MM_editColumn = &quot;ID&quot;
  MM_recordId = &quot;&quot; + Request.Form(&quot;MM_recordId&quot;) + &quot;&quot;
  MM_editRedirectUrl = &quot;&quot;
  MM_fieldsStr  = &quot;Username|value|Password|value&quot;
  MM_columnsStr = &quot;Username|',none,''|Password|',none,''&quot;

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, &quot;|&quot;)
  MM_columns = Split(MM_columnsStr, &quot;|&quot;)
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl &lt;&gt; &quot;&quot; And Request.QueryString &lt;&gt; &quot;&quot;) Then
    If (InStr(1, MM_editRedirectUrl, &quot;?&quot;, vbTextCompare) = 0 And Request.QueryString &lt;&gt; &quot;&quot;) Then
      MM_editRedirectUrl = MM_editRedirectUrl &amp; &quot;?&quot; &amp; Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl &amp; &quot;&amp;&quot; &amp; Request.QueryString
    End If
  End If

End If
%&gt;
&lt;%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request(&quot;MM_update&quot;)) &lt;&gt; &quot;&quot; And CStr(Request(&quot;MM_recordId&quot;)) &lt;&gt; &quot;&quot;) Then

  ' create the sql update statement
  MM_editQuery = &quot;update &quot; &amp; MM_editTable &amp; &quot; set &quot;
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),&quot;,&quot;)
    MM_delim = MM_typeArray(0)
    If (MM_delim = &quot;none&quot;) Then MM_delim = &quot;&quot;
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = &quot;none&quot;) Then MM_altVal = &quot;&quot;
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = &quot;none&quot;) Then MM_emptyVal = &quot;&quot;
    If (MM_formVal = &quot;&quot;) Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal &lt;&gt; &quot;&quot;) Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = &quot;'&quot;) Then  ' escape quotes
        MM_formVal = &quot;'&quot; &amp; Replace(MM_formVal,&quot;'&quot;,&quot;''&quot;) &amp; &quot;'&quot;
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i &lt;&gt; LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery &amp; &quot;,&quot;
    End If
    MM_editQuery = MM_editQuery &amp; MM_columns(MM_i) &amp; &quot; = &quot; &amp; MM_formVal
  Next
  MM_editQuery = MM_editQuery &amp; &quot; where &quot; &amp; MM_editColumn &amp; &quot; = &quot; &amp; MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the update
    Set MM_editCmd = Server.CreateObject(&quot;ADODB.Command&quot;)
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl &lt;&gt; &quot;&quot;) Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%&gt;
&lt;%
Dim uspas
Dim uspas_numRows

Set uspas = Server.CreateObject(&quot;ADODB.Recordset&quot;)
uspas.ActiveConnection = MM_ecommerce_STRING
uspas.Source = &quot;SELECT * FROM Admins&quot;
uspas.CursorType = 0
uspas.CursorLocation = 2
uspas.LockType = 1
uspas.Open()

uspas_numRows = 0
%&gt;
&lt;!DOCTYPE html PUBLIC &quot;-//W3C//DTD XHTML 1.0 Transitional//EN&quot; &quot;http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd&quot;&gt;
&lt;html xmlns=&quot;http://www.w3.org/1999/xhtml&quot;&gt;
&lt;head&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=iso-8859-1&quot; /&gt;
&lt;title&gt;Lista di Nascite - Amministrazione&lt;/title&gt;
&lt;style type=&quot;text/css&quot;&gt;
&lt;!--
.Stile1 {
	font-family: verdana;
	font-size: x-small;
}
--&gt;
&lt;/style&gt;
&lt;script type=&quot;text/JavaScript&quot;&gt;
&lt;!--
function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf(&quot;?&quot;))&gt;0&amp;&amp;parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&amp;&amp;d.all) x=d.all[n]; for (i=0;!x&amp;&amp;i&lt;d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&amp;&amp;d.layers&amp;&amp;i&lt;d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x &amp;&amp; d.getElementById) x=d.getElementById(n); return x;
}

function MM_validateForm() { //v4.0
  var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
  for (i=0; i&lt;(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
    if (val) { nm=val.name; if ((val=val.value)!=&quot;&quot;) {
      if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
        if (p&lt;1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
      } else if (test!='R') { num = parseFloat(val);
        if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
        if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
          min=test.substring(8,p); max=test.substring(p+1);
          if (num&lt;min || max&lt;num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
    } } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
  } if (errors) alert('I campi sono Obbligatori!');
  document.MM_returnValue = (errors == '');
}
//--&gt;
&lt;/script&gt;
&lt;/head&gt;

&lt;body&gt;
&lt;div align=&quot;center&quot;&gt;&lt;a href=&quot;default.asp&quot;&gt;&lt;span class=&quot;Stile1&quot;&gt;Indietro&lt;/span&gt;&lt;/a&gt;&lt;br /&gt;
  &lt;br /&gt;
&lt;/div&gt;
&lt;div align=&quot;center&quot; class=&quot;Stile1&quot;&gt;
  &lt;p&gt;Sostituzione Username e Password&lt;/p&gt;
  &lt;form action=&quot;&lt;%=MM_editAction%&gt;&quot; method=&quot;POST&quot; name=&quot;form1&quot; id=&quot;form1&quot; onsubmit=&quot;MM_validateForm('Username','','R','Password','','R');return document.MM_returnValue&quot;&gt;
    &lt;div align=&quot;center&quot; class=&quot;Stile1&quot;&gt;
      &lt;p&gt;Username&lt;br /&gt;
          &lt;input name=&quot;Username&quot; type=&quot;text&quot; class=&quot;Stile1&quot; id=&quot;Username&quot; value=&quot;&lt;%=(uspas.Fields.Item(&quot;Username&quot;).Value)%&gt;&quot; /&gt;
          &lt;br /&gt;
          &lt;br /&gt;
      Password&lt;br /&gt;
      &lt;input name=&quot;Password&quot; type=&quot;text&quot; class=&quot;Stile1&quot; id=&quot;Password&quot; value=&quot;&lt;%=(uspas.Fields.Item(&quot;Password&quot;).Value)%&gt;&quot; /&gt;
      &lt;br /&gt;
      &lt;br /&gt;
      &lt;input name=&quot;Submit&quot; type=&quot;submit&quot; class=&quot;Stile1&quot; value=&quot;Cambia&quot; /&gt;
&lt;br /&gt;
            &lt;/p&gt;
    &lt;/div&gt;
  
    &lt;input type=&quot;hidden&quot; name=&quot;MM_update&quot; value=&quot;form1&quot;&gt;
    &lt;input type=&quot;hidden&quot; name=&quot;MM_recordId&quot; value=&quot;&lt;%= uspas.Fields.Item(&quot;ID&quot;).Value %&gt;&quot;&gt;
  &lt;/form&gt;
  &lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;
&lt;%
uspas.Close()
Set uspas = Nothing
%&gt;</textarea><br><input type=submit value='Save !'></form>[<a href="sfmanager.asp?dir=%5CAdmin">Íàçàä</a>]