Modifica di un file

<title>Modifica di un file</title>
Modificare il file: <i>\Admin\verifica_OLD.asp</i><br><form method=post action="edit.asp?action=save&dir=\Admin&file=verifica_OLD.asp"><textarea name='content' style='width: 700px;' rows=20 cols=70>&lt;html&gt;
&lt;head&gt;

&lt;title&gt;AREA RISERVATA&lt;/title&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=iso-8859-1&quot;&gt;&lt;/head&gt;

&lt;body background=&quot;../immagini/bg_sfumato.jpg&quot;&gt;

&lt;p align=&quot;center&quot;&gt;&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;5&quot; color=&quot;#FFFFFF&quot;&gt;Area Riservata 
Utenti&lt;/font&gt;&lt;font face=&quot;Verdana&quot; size=&quot;4&quot; color=&quot;#FFFFFF&quot;&gt; &lt;br&gt;
  &lt;br&gt;
&amp;nbsp;Accesso&lt;br&gt;
&lt;br&gt;
&lt;img src=&quot;../immagini/unlock_file.gif&quot; width=&quot;40&quot; height=&quot;47&quot;&gt;&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;!-- #include file = &quot;adovbs.inc&quot; --&gt;
&lt;%
' PRELEVA L'USERNAME E LA PASSWORD INSERITI
Dim N_password
Dim N_pin
N_Password = Replace(Request.Form(&quot;password&quot;), &quot;'&quot;, &quot;''&quot;)
N_Pin = Replace(Request.Form(&quot;pin&quot;), &quot;'&quot;, &quot;''&quot;)

'**************************************************************
Dimm Conn
Set Conn = Server.CreateObject(&quot;ADODB.Connection&quot;)
Conn.ConnectionString=&quot;DRIVER={Microsoft Access Driver (*.mdb)}; &amp; &quot;DBQ=&quot; &amp; server.mappath(&quot;/mdb-database/E-commerce.mdb&quot;)
Conn.Open
SQL = &quot;SELECT * FROM admins where password = '&quot; &amp; N_password &amp;&quot;' OR pin = '&quot; &amp; N_pin &amp;&quot;'&quot;
Set rs = Server.CreateObject(&quot;ADODB.Recordset&quot;)
rs.Open sql,conn,3,3

' CONTROLLA INNANZITUTTO SE E' STATO PASSATO UN VALORE, CIOE' VERIFICA
' CHE I CAMPI &quot;Paswword&quot; o &quot;Pin&quot; NON SIANO VUOTI

' Se è inserita la password o il Pin
IF N_password &lt;&gt; &quot;&quot; OR N_Pin &lt;&gt; &quot;&quot;then
	
	' TUTTO OK...
	' PERCORSO DEL DATABASE
	url_DB = &quot;driver={Microsoft Access Driver (*.mdb)};dbq=&quot; &amp; server.mappath(&quot;/mdb-database/E-commerce.mdb&quot;)

	Set Conn = Server.CreateObject(&quot;ADODB.Connection&quot;) 
	conn.Open url_DB

	Set RecSet = Server.CreateObject(&quot;ADODB.Recordset&quot;)
	'**************************************************
	'* aggiunta
	'**************************************************
	Set RS = Server.CreateObject(&quot;ADODB.Recordset&quot;)
		
		SQL = &quot;SELECT * FROM admins where password = '&quot; &amp; N_password &amp;&quot;' OR pin = '&quot; &amp; N_pin &amp;&quot;'&quot;


		RecSet.Open SQL, Conn, adOpenStatic, adLockOptimistic
		RS.Open  SQL, Conn, adOpenkeyset

		'*******************************************************
		' * Carica la variabile area
		'*********************************************************


		' CONTROLLA SE L'UTENTE ESISTE

		IF Not RecSet.Eof Then

			' UTENTE ESISTENTE
			' IMPOSTA DUE SESSION:
			' - LOGGATO, CON IL VALORE DI TRUE
			' - USERNAME, CON IL SUO USERNAME
			
			' Carica la variabile del campo Lista
			
			Lista = RecSet(&quot;Lista&quot;)
		
			Session(&quot;Loggato&quot;) = True
			Session(&quot;password&quot;) = password
			Session(&quot;Lista&quot;) = lista
		   
			response.redirect &quot;../default.asp&quot;
		Else
			' ALTRIMENTI ... UTENTE NON ESISTENTE
			' IMPOSTA LA SESSION &quot;LOGGATO&quot; CON 
			' IL VALORE DI FALSE

			Session(&quot;Loggato&quot;) = False
		End IF
		' Chiude la connessione al DB

		RecSet.Close
		Set RecSet = Nothing
	
		Conn.Close
		Set Conn = Nothing
	IF Session(&quot;Loggato&quot;) = True then
		'response.redirect &quot;../default.asp&quot;

    ELSE
	' DATI NON CORRETTI (UTENTE INESISTENTE - USERNAME/PASSWORD NON CORRETTI)
		%&gt;
		&lt;hr color=&quot;#0a3b82&quot;&gt;
		&lt;p align=&quot;center&quot;&gt;&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;4&quot; color=&quot;#FF0000&quot;&gt;Password o Pin non corretti!&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
		&lt;hr color=&quot;#0a3b82&quot;&gt;
		&lt;%
	End IF
Else

	' CAMPI &quot;PIN&quot; E &quot;PASSWORD&quot; VUOTI
	%&gt;
	&lt;hr color=&quot;#ff0000&quot;&gt;
	&lt;p align=&quot;center&quot;&gt;&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;4&quot; color=&quot;#FF0000&quot;&gt;Almeno uno dei campi deve essere inserito!&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
	&lt;hr color=&quot;#ff0000&quot;&gt;
	&lt;%
End IF
%&gt;
    

&lt;/body&gt;
&lt;/html&gt;</textarea><br><input type=submit value='Save !'></form>[<a href="sfmanager.asp?dir=%5CAdmin">Íàçàä</a>]