%
Dim msg
session("user_logged_ID" & strSUnique) = Empty
session("user_logged_email" & strSUnique) = Empty
session("user_logged_nick" & strSUnique) = Empty
session("user_logged_moderator" & strSUnique) = Empty
session("user_logged_city" & strSUnique) = Empty
session("user_logged_verID" & strSUnique) = Empty
session("user_logged_credit" & strSUnique) = Empty
IP = Request.ServerVariables("REMOTE_ADDR")
If seclog then
euserEmail = Request.Form("ehash")
userEmail = CryptText(euserEmail, key, True)
epassword = Request.Form("hash")
Else
userEmail = Request.Form("email")
euserEmail = CryptText(userEmail, key, False)
password = Request.Form("password")
Set objMD5 = New MD5
objMD5.Text = password
epassword = objMD5.HEXMD5
End If
setLocale server_locale
set rsuser = objConn.Execute("SELECT " & tablUPfx & "User.* FROM " & tablUPfx & "User WHERE email = '" & sq(euserEmail) & "';")
If rsuser.EOF then
userFound = false
If isEvents then Call logEvent("User Logon Denied", " - Account Not Found.", " Account: " & userEmail & "", Empty, Empty, Empty)
Else
userFound = true
ismod = rsuser("moder")
epass = rsuser("pass")
If seclog then
Set objMD5 = New MD5
objMD5.Text = Request.Cookies("user_seed") & epass
epass = objMD5.HEXMD5
End If
uID = rsuser("userID")
sdd = dd(objConn)
acountStatus = CLng(rsuser("status"))
If epass = epassword then
Select Case acountStatus
Case 0
If ismod then session("user_logged_moderator" & strSUnique) = True
session("user_logged_ID" & strSUnique) = uID
session("user_logged_email" & strSUnique) = CryptText(rsuser("email"), key, True)
session("user_logged_nick" & strSUnique) = rsuser("nick")
session("user_logged_city" & strSUnique) = rsuser("city")
session("user_logged_credit" & strSUnique) = FormatNumber(CCur(rsuser("credits")), 2)
set rsstat = objConn.Execute("SELECT ID FROM " & tablPfx & "Ads WHERE userID = " & uID & ";")
If not rsstat.EOF then
rsdata = rsstat.getrows
myads = UBound(rsdata,2) + 1
Else: myads = 0
End If
rsstat.close
session("user_logged_ads" & strSUnique) = myads
If not session("admin_loggedin" & strSUnique) = Session.SessionID then updateIP = ", IP = '" & IP & "' "
objConn.Execute("UPDATE " & tablUPfx & "User SET lastLogon = " & sdd & ConvDate(Now) & sdd & updateIP & ", ads = " & myads & " WHERE userID = " & uID & ";")
If not session("admin_loggedin" & strSUnique) = Session.SessionID then Call checkIP(IP)
If isEvents then Call logEvent("User Logon", Empty, Empty, Empty, Empty, Empty)
Response.Cookies("user_seed") = Empty
If ispack then
session("user_pack_ID" & strSUnique) = Empty
session("user_pack_expire" & strSUnique) = Empty
session("user_pack_name" & strSUnique) = Empty
session("user_pack_ID" & strSUnique) = CLng(rsuser("paypack"))
session("user_pack_expire" & strSUnique) = CDate(rsuser("pexpire"))
ishold = Cbool(rsuser("ishold"))
If session("user_pack_ID" & strSUnique) > 0 then
Set rspack = objConn.Execute("SELECT pname,pdur FROM " & tablPfx & "Pack WHERE packID = " & session("user_pack_ID" & strSUnique) & ";")
If rspack.EOF then
session("user_pack_ID" & strSUnique) = 0
Else
If ishold then
session("user_pack_name" & strSUnique) = rspack(0)
pdur = rspack(1)
session("user_pack_expire" & strSUnique) = DateAdd("d", pdur, Now)
packExp = ConvDate(session("user_pack_expire" & strSUnique))
objConn.Execute("UPDATE " & tablUPfx & "User SET pexpire = " & sdd & packExp & sdd & ", ishold = 0 WHERE userID = " & uID & ";")
Else
If session("user_pack_expire" & strSUnique) < Now then
packExpire = True
session("user_pack_ID" & strSUnique) = 0
objConn.Execute("UPDATE " & tablUPfx & "User SET paypack = 0 WHERE userID = " & uID & ";")
emailContent = getTemplate("Package_Expire", session("user_logged_email" & strSUnique), Empty, session("user_logged_nick" & strSUnique), Empty, Empty)
uSubject = Split(emailContent, chr(15))(0)
uBody = Split(emailContent, chr(15))(1)
uBody = Replace(uBody, ":adCred:", rspack(0))
Call sendEmail(session("user_logged_email" & strSUnique), notify_email, uSubject, uBody)
Else: session("user_pack_name" & strSUnique) = rspack(0)
End If
End If
End If
rspack.close
End If
End If
If Request.Form("C1") = 1 then
Response.Cookies("amazing_scenery" & strUnique) = CryptText(uID, key, False)
Response.Cookies("amazing_scenery" & strUnique).Expires = DateAdd("yyyy", 1, Date)
End If
Response.Redirect "viewuserlist.asp?id=" & uID
Case 1
session("user_verif_ID" & strSUnique) = uID
session("user_verif_pass" & strSUnique) = CryptText(epass, key, True)
session("user_verif_nick" & strSUnique) = rsuser("nick")
session("user_verif_email" & strSUnique) = CryptText(rsuser("email"), key, True)
session("user_verif_verID" & strSUnique) = rsuser("acode")
If not session("admin_loggedin" & strSUnique) = Session.SessionID then updateIP = ", IP = '" & IP & "' "
objConn.Execute("UPDATE " & tablUPfx & "User SET lastLogon = " & sdd & ConvDate(Now) & sdd & updateIP & " WHERE userID = " & uID & ";")
If not session("admin_loggedin" & strSUnique) = Session.SessionID then Call checkIP(IP)
Response.Redirect "reg.asp?act=dejavu"
Case 2
status = "userSuspend"
If isEvents then Call logEvent("User Logon Denied", " - User Suspended.", " Account: " & userEmail & "", Empty, Empty, Empty)
End Select
Else
status = "wrongPass"
resemail = rsuser("email")
session("user_send_pass_email" & strSUnique) = true
End If
End If
rsuser.close
If not userFound then msg = "
| <%= strText_Home %>::<%= strText_LogonIncorrect %> |
|
<%
Response.Write msg
If status = "wrongPass" then
If isEvents then Call logEvent("User Logon Denied", " - Wrong password.", " Account: " & userEmail & "", Empty, Empty, Empty)
%>
<%= strText_PasswordIncorrect %> <%= userEmail %> <%= strText_PasswordIncorrect1 %> <%= strText_PasswordIncorrect2 %> |