<% OPTION EXPLICIT %>
<%
'==============================================================
' This file contains the database configuration. It also opens
' a connection object (Conn) using OpenCnx.
' The file also contains some common function.
'==============================================================
'Global scope variables:
Dim conn 'Connection object
Dim dbPassword 'Database password
'===========================================================
' Sub: OpenCnx
' Desc: 'Opens connection conn if it is not already open.
' >>> Please, modify configuration with correct values <<<
'===========================================================
Sub OpenCnx (ByRef conn)
If NOT IsObject(conn) Then
On Error Resume Next
Dim ConnStr 'Connection string
Dim dbPassword 'Database password
Set conn = Server.CreateObject("ADODB.Connection")
dbPassword = "QS2003p" ' <<<< Change any new Access database password here.
'-------------------------------------------------------
'Pick ONE of the following configurations and comment the others
'For additional tech. info see
' - http://www.able-consulting.com/ADO_Conn.htm
'-------------------------------------------------------
'1. Configuration for System DSN
'ConnStr = "DSN=DSN_Name;uid=;pwd=" & dbPassword
'2. Configuration for file DSN (DSN-Less)
'ConnStr = "DBQ=d:\inetpub\quadcomm.com\db\store.mdb;Driver={Microsoft Access Driver (*.mdb)};uid=;pwd=" & dbPassword
'3. Configuration for OLEDB drivers (more efficient)
'a) Example of OLEDB connection with OLEDB 3.51 (if you have to use this one you may want to
'consider installing a newer version of MDAC
'ConnStr = "Provider=Microsoft.Jet.OLEDB.3.51; Data Source=C:\web\quadcomm\db\store.mdb; Jet OLEDB:Database Password=" & dbPassword
'b)Example of OLEDB connection on Windows 2000 server (version 4.0)
'ConnStr = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=C:\web\quadcomm\db\store.mdb; Jet OLEDB:Database Password=" & dbPassword
ConnStr = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=C:\Web\starquestpublishing\db\store2K.mdb; Jet OLEDB:Database Password=" & dbPassword
'c)Example of OLEDB connection on Windows 2000 server (version 4.0) and MS SQL Server 7.0/2000
'ConnStr = "Provider=SQLOLEDB; Data Source=(local); Initial Catalog=QShopDB; User ID=qshop_usr; Password=" & dbPassword
'ConnStr = "Provider=SQLOLEDB; Data Source=(local); Initial Catalog=Q-Shop; User ID=sa; Password="
'-------------------------------------------------------
conn.open ConnStr 'Open connection object
'-------------------------------------------------------
'When the site is working we recommend you to comment
'Option 1 and uncomment option 2
'-------------------------------------------------------
If conn.errors.count > 0 then
Dim counter
For counter = 0 to conn.errors.count-1
If int(conn.errors(counter).number) <> 0 Then
' Option 1
response.write "Error # :" & conn.errors(counter).number & "
"
If conn.errors(counter).number = -2147467259 Then
response.write "Suggestion: Check the connection string ConnStr in conx.asp and make sure that only one option is not commented using '.
"
End If
If Request.QueryString("reset") = "yes" Then
Session("UserID") = GenerateUserId
End If
If Request.QueryString("logout") = "yes" Then
Session("Logged") = False
End If
If Request("Login") <> "" OR Request.Form("Login.x") <> "" Then
'Login Process
'1st Check we have user and password
If Trim(Request("UserID"))= "" OR Trim(Request("Pwd"))= "" Then
'Not all provided
strMsg = "
Sorry, you didn't complete your e-mail or user ID and password.
"
Session("Logged") = False
Else
'Check in database. Use CleanLoginPwd to avoid SQL Injection attacks
strSQL = "SELECT * FROM Users WHERE (UserID = '" & CleanLoginPwd(Request("UserID")) & _
"' OR mail = '" & CleanLoginPwd(Request("UserID")) & "' )AND Pwd = '" & CleanLoginPwd(Request("Pwd")) & "'"
set rsUsr = conn.Execute (strSQL)
If rsUsr.EOF AND rsUsr.BOF Then
'Not valid
strMsg = "
Sorry, the login and password provided are not correct.
"
Session("Logged") = False
else
'Get user data and initialise Session variables
Session("UserID") = rsUsr("UserID")
Session("uPwd") = Request("Pwd")
Session("Mail") = rsUsr("mail")
Session("Name") = rsUsr("Name")
Session("Surname") = rsUsr("Surname")
Session("Country") = rsUsr("Country")
If IsNull(rsUsr("Discount")) Then
Session("UserDiscount") = 0
Else
Session("UserDiscount") = rsUsr("Discount")
End If
If Application("Tax_Model") = "EU" Then Session("TaxID") = rsUsr("TaxID")
Session("Logged") = True
rsUsr.Close
'Set the cookie as default in this machine
Call WriteUserIdCookie (Session("UserID"))
'Update LastVisit field in the user record
UpdateLastVisit Session("UserID")
End If
set rsUsr = nothing
End If
End If
%>
<%= shop_Title %>
<%
'======================================================================================
' File: head.inc
' Description: This file produces the HTML for the definition of the top of all the
' shop pages. It also includes a call to the include file that creates
' the left hand side navigation bar leftinc.asp and until the creation of
' the cell that contains the main body of the pages.
'======================================================================================
' Initialise cat variable with the contents of Request("cat"). This holds current
' category/section
Dim strNav
If Request("cat") <> "" Then strNav = "cat=" & Request("cat") & "&path=" & Request("path")
%>
<%
'If user has logged in show available functions
If Session("UserID") <> "" AND Session("uPwd") <> "" AND Session("Logged") AND Request("new")= "" Then %>
Your E-mail is <%= Session("Mail") %> (User ID: <%= Session("UserID") %> )
Select this option to review and modify your account details. You can also specify whether you want to receive information of products and/or promotions.
If you would like to we recognised with this account every time you come back, select this function. This allows you to use the same account with different browsers or from different locations. We won't log you in automatically but you will be greeted by name and will be able to access your list without logging in.
For options not covered in this section, please, contact us.
<% Else
'User not logged in. Show login form.
If strMsg <> "" Then %>
<%= strMsg %>
<% End If %>
If you don't have an account yet, you can create it here. Alternatively, an account will be automatically created the first time you place an order with us.
Cart
Feedback
