<%@LANGUAGE="JAVASCRIPT"%> <% // *** Logout the current user. MM_Logout = String(Request.ServerVariables("URL")) + "?MM_Logoutnow=1"; if (String(Request("MM_Logoutnow"))=="1") { Session.Contents.Remove("MM_Username"); Session.Contents.Remove("MM_UserAuthorization"); var MM_logoutRedirectPage = "../index.htm"; // redirect with URL parameters (remove the "MM_Logoutnow" query param). if (MM_logoutRedirectPage == "") MM_logoutRedirectPage = String(Request.ServerVariables("URL")); if (String(MM_logoutRedirectPage).indexOf("?") == -1 && Request.QueryString != "") { var MM_newQS = "?"; for (var items=new Enumerator(Request.QueryString); !items.atEnd(); items.moveNext()) { if (String(items.item()) != "MM_Logoutnow") { if (MM_newQS.length > 1) MM_newQS += "&"; MM_newQS += items.item() + "=" + Server.URLencode(Request.QueryString(items.item())); } } if (MM_newQS.length > 1) MM_logoutRedirectPage += MM_newQS; } Response.Redirect(MM_logoutRedirectPage); } %> <% // *** Edit Operations: declare variables // set the form action variable var MM_editAction = Request.ServerVariables("SCRIPT_NAME"); if (Request.QueryString) { MM_editAction += "?" + Request.QueryString; } // boolean to abort record edit var MM_abortEdit = false; // query string to execute var MM_editQuery = ""; %> <% // *** Redirect if username exists var MM_flag="MM_insert"; if (String(Request(MM_flag)) != "undefined") { var MM_dupKeyRedirect="loginfailemail.htm"; var MM_rsKeyConnection=MM_DB2_STRING; var MM_dupKeyUsernameValue = String(Request.Form("emailaddress")); var MM_dupKeySQL = "SELECT EmailAddress FROM Customer WHERE EmailAddress='" + MM_dupKeyUsernameValue + "'" var MM_adodbRecordset = "ADODB.Recordset"; var MM_rsKey = Server.CreateObject(MM_adodbRecordset); MM_rsKey.ActiveConnection = MM_rsKeyConnection; MM_rsKey.Source = MM_dupKeySQL; MM_rsKey.CursorType=0; MM_rsKey.CursorLocation=2; MM_rsKey.LockType=3; MM_rsKey.Open(); if (!MM_rsKey.EOF || !MM_rsKey.BOF) { // the username was found - can not add the requested username var MM_qsChar = "?"; if (MM_dupKeyRedirect.indexOf("?") >= 0) MM_qsChar = "&"; MM_dupKeyRedirect = MM_dupKeyRedirect + MM_qsChar + "requsername=" + MM_dupKeyUsernameValue; Response.Redirect(MM_dupKeyRedirect); } MM_rsKey.Close(); } %> <% // *** Insert Record: set variables if (String(Request("MM_insert")) == "form3") { var MM_editConnection = MM_DB2_STRING; var MM_editTable = "Customer"; var MM_editRedirectUrl = "userconfirm.htm"; var MM_fieldsStr = "name|value|address1|value|address2|value|city|value|county|value|postcode|value|phone|value|emailaddress|value|password|value|select2|value|Newsletter|value"; var MM_columnsStr = "CustomerName|',none,''|Address|',none,''|Address2|',none,''|City|',none,''|County|',none,''|Postcode|',none,''|PhoneNumber|',none,''|EmailAddress|',none,''|Password|',none,''|Hearaboutus|',none,''|NewsLetter|none,none,NULL"; // create the MM_fields and MM_columns arrays var MM_fields = MM_fieldsStr.split("|"); var MM_columns = MM_columnsStr.split("|"); // set the form values for (var i=0; i+1 < MM_fields.length; i+=2) { MM_fields[i+1] = String(Request.Form(MM_fields[i])); } // append the query string to the redirect URL if (MM_editRedirectUrl && Request.QueryString && Request.QueryString.Count > 0) { MM_editRedirectUrl += ((MM_editRedirectUrl.indexOf('?') == -1)?"?":"&") + Request.QueryString; } } %> <% // *** Insert Record: construct a sql insert statement and execute it if (String(Request("MM_insert")) != "undefined") { // create the sql insert statement var MM_tableValues = "", MM_dbValues = ""; for (var i=0; i+1 < MM_fields.length; i+=2) { var formVal = MM_fields[i+1]; var MM_typesArray = MM_columns[i+1].split(","); var delim = (MM_typesArray[0] != "none") ? MM_typesArray[0] : ""; var altVal = (MM_typesArray[1] != "none") ? MM_typesArray[1] : ""; var emptyVal = (MM_typesArray[2] != "none") ? MM_typesArray[2] : ""; if (formVal == "" || formVal == "undefined") { formVal = emptyVal; } else { if (altVal != "") { formVal = altVal; } else if (delim == "'") { // escape quotes formVal = "'" + formVal.replace(/'/g,"''") + "'"; } else { formVal = delim + formVal + delim; } } MM_tableValues += ((i != 0) ? "," : "") + MM_columns[i]; MM_dbValues += ((i != 0) ? "," : "") + formVal; } MM_editQuery = "insert into " + MM_editTable + " (" + MM_tableValues + ") values (" + MM_dbValues + ")"; if (!MM_abortEdit) { // execute the insert var MM_editCmd = Server.CreateObject('ADODB.Command'); MM_editCmd.ActiveConnection = MM_editConnection; MM_editCmd.CommandText = MM_editQuery; MM_editCmd.Execute(); MM_editCmd.ActiveConnection.Close(); if (MM_editRedirectUrl) { Response.Redirect(MM_editRedirectUrl); } } } %> <% var Recordset1 = Server.CreateObject("ADODB.Recordset"); Recordset1.ActiveConnection = MM_DB2_STRING; Recordset1.Source = "SELECT * FROM Customer"; Recordset1.CursorType = 0; Recordset1.CursorLocation = 2; Recordset1.LockType = 1; Recordset1.Open(); var Recordset1_numRows = 0; %> <% // *** Validate request to log in to this site. var MM_LoginAction = Request.ServerVariables("URL"); if (Request.QueryString!="") MM_LoginAction += "?" + Request.QueryString; var MM_valUsername=String(Request.Form("emailexist")); if (MM_valUsername != "undefined") { var MM_fldUserAuthorization="LevelID"; var MM_redirectLoginSuccess="loggedinOrder.asp"; var MM_redirectLoginFailed="fail.htm"; var MM_flag="ADODB.Recordset"; var MM_rsUser = Server.CreateObject(MM_flag); MM_rsUser.ActiveConnection = MM_cslogin_STRING; MM_rsUser.Source = "SELECT EmailAddress, Password"; if (MM_fldUserAuthorization != "") MM_rsUser.Source += "," + MM_fldUserAuthorization; MM_rsUser.Source += " FROM Customer WHERE EmailAddress='" + MM_valUsername.replace(/'/g, "''") + "' AND Password='" + String(Request.Form("passwordexist")).replace(/'/g, "''") + "'"; MM_rsUser.CursorType = 0; MM_rsUser.CursorLocation = 2; MM_rsUser.LockType = 3; MM_rsUser.Open(); if (!MM_rsUser.EOF || !MM_rsUser.BOF) { // username and password match - this is a valid user Session("MM_Username") = MM_valUsername; if (MM_fldUserAuthorization != "") { Session("MM_UserAuthorization") = String(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value); } else { Session("MM_UserAuthorization") = ""; } if (String(Request.QueryString("accessdenied")) != "undefined" && true) { MM_redirectLoginSuccess = Request.QueryString("accessdenied"); } MM_rsUser.Close(); Response.Redirect(MM_redirectLoginSuccess); } MM_rsUser.Close(); Response.Redirect(MM_redirectLoginFailed); } %> Character Shop for character merchandise Untitled Document
Search Products

 

Login

Logout

Check Order

 

 

 

LOGIN

Existing Users

E-mail Address
Password

 

New users

Name
Address
 
City
County
Postcode
Phone Number
Email Address (This will be your login ID)
Password
Where did you hear about us?

 

Subscription To CharcterShop Newsletter

 

 

 

 

 

<% Recordset1.Close(); %>