www.HighRiseTimes.dk

<% strFarve = "FFFFFF" %>

| crew: |

<% if len(request.QueryString("id")) = 0 then strConnect = session("crew") else strConnect = request.QueryString("id") end if response.write "

" %>

<% MyDay = Day(Now) MyMonth = Month(Now) MyHour = Hour(Now) MyMinute = Minute(Now) MySecond = Second(Now) If len(MyDay) < 2 then strD = "0" else strD = "" end if If len(MyMonth) < 2 then strM = "0" else strM = "" end if If len(MyHour) < 2 then strH = "0" else strH = "" end if If len(MyMinute) < 2 then strMi = "0" else strMi = "" end if If len(MySecond) < 2 then strS = "0" else strS = "" end if strLigeNu = strD & Day(Now) & "-" & strM & Month(Now) & "-" & Year(Now) & " " & strH & Hour(Now) & ":" & strMi & Minute(Now) & ":" & strS & Second(Now) Set Conn = Server.CreateObject("ADODB.Connection") DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " DSN = DSN & "DBQ=" & Server.MapPath("../../database/crew.mdb") Conn.Open DSN strMode = Request.QueryString("side") Select Case strMode Case "gb" strSQL = "Select * from nyheder Where id = " & Request.QueryString("id") Set rs = Conn.Execute(strSQL) If Not (rs.BOF Or rs.EOF) Then Response.Write "" & rs("hhnavn") & "'s gæstebog:
" Else Response.Redirect "crew.asp" End if Response.Write "Tilføj indlæg

" strSQL = "Select * from gb Where bruger = '" & Request.QueryString("id") & "' Order by id desc" Set rs = Conn.Execute(strSQL) If Not (rs.BOF Or rs.EOF) Then Do Response.Write "

" & rs("navn") & ": " & left(rs("besked"),60) & "..

| læs |

" rs.MoveNext Loop While Not rs.EOF Else Response.Write "Gæstebogen er tom for indlæg.
" End if Conn.Close Set Conn = Nothing %> <% Case "gbinf" Function StripHtml(Str) Str = Replace(Str, vbCrLf, "
") StripHtml = Str End Function strSQL = "Select * from nyheder Where id = " & Request.QueryString("id") Set rs = Conn.Execute(strSQL) if not (rs.EOF or rs.BOF) then Response.Write "" & rs("hhnavn") & "'s gæstebog:
" else Response.Redirect "crew.asp" end if strSQL = "Select * from gb Where id = " & Request.QueryString("nummer") Set rs = Conn.Execute(strSQL) If Not (rs.BOF Or rs.EOF) Then Response.write "

Afsender: | " & rs("navn") & "
Dato: | " & rs("dato") & "
Besked: " & StripHtml(rs("besked")) & "

" Else Response.Write "OBS: Indlæget findes ikke." End if Conn.Close Set Conn = Nothing %>

| oversigt | >

<% Case "skriv" strSQL = "Select * from nyheder Where id = " & Request.QueryString("id") Set rs = Conn.Execute(strSQL) if not (rs.EOF or rs.BOF) then Response.Write "Skriv i " & rs("hhnavn") & "'s gæstebog:
" else Response.Redirect "crew.asp" end if %> " method="post"> Besked:
Du har tegn tilgode..

| tilføj |

<% Case "opret" if len(session("com")) = 0 then response.redirect "../unlogged.asp" else Conn.Close Set Conn = Nothing Set Conn = Server.CreateObject("ADODB.Connection") DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " DSN = DSN & "DBQ=" & Server.MapPath ("../../database/system.mdb") Conn.Open DSN strSQL = "Select * from nyheder Where id = " & session("com") Set rs = Conn.Execute(strSQL) strSkriveNavn = rs("hhnavn") strBrugerId = rs("id") strSkrifttype = rs("skrifttype") strTypografi = rs("typografi") strStorrelse = rs("storrelse") strGennemstreget = rs("gennemstreget") strUnderstreget = rs("understreget") strFarve = rs("farve") if strTypografi = "n" then strT = "" strSlutT = "" elseif strTypografi = "i" then strT = "" strSlutT = "" elseif strTypografi = "b" then strT = "" strSlutT = "" end if if len(strGennemstreget) = 0 then strGennemS = "" strSlutGennemS = "" else strGennemS = "" strSlutGennemS = "" end if if len(strUnderstreget) = 0 then strUnderS = "" strSlutUnderS = "" else strUnderS = "" strSlutUnderS = "" end if Conn.Close Set Conn = Nothing Set Conn = Server.CreateObject("ADODB.Connection") DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " DSN = DSN & "DBQ=" & Server.MapPath ("../../database/crew.mdb") Conn.Open DSN If len(Request.Form("besked")) > 300 Then Response.Write "OBS: Din besked må højest fylde 300 tegn." ElseIf Request.Form("besked") = "" Then Response.Write "OBS: Du mangler at skrive beskeden." Else if len(Server.HTMLEncode(request.Form("besked"))) > 33 AND InStr(1, Server.HTMLEncode(request.Form("besked")), " ", 1) = 0 then strSI = left(Server.HTMLEncode(request.Form("besked")),33) else strSI = Server.HTMLEncode(request.Form("besked")) end if strSQL = "Insert into gb (" strSQL = strSQL & "navn, " strSQL = strSQL & "besked, " strSQL = strSQL & "dato, " strSQL = strSQL & "bruger, " strSQL = strSQL & "ip, " strSQL = strSQL & "link, " strSQL = strSQL & "class) " strSQL = strSQL & "values( " strSQL = strSQL & "'" & strSkriveNavn & "', " strSQL = strSQL & "'" & strT & strUnderS & strGennemS & strSI & strSlutGennemS & strSlutUnderS & strSlutT & "', " strSQL = strSQL & "'" & strLigeNu & "', " strSQL = strSQL & "'" & Request.QueryString("id") & "', " strSQL = strSQL & "'" & Request.ServerVariables("Remote_Host") & "', " strSQL = strSQL & "'" & strBrugerId & "', " strSQL = strSQL & "'" & strStorrelse & "')" Conn.Execute(strSQL) Conn.Close Set Conn = Nothing Response.Redirect "index.asp?side=gb&id=" & Request.QueryString("id") End If end if %> <% Case "adminlist" session("crew") = session("login") strSQL = "Select * from nyheder Where id =" & session("crew") Set rs = Conn.Execute(strSQL) id = rs("id") Response.Write "" & rs("hhnavn") & "'s admin-side:
Vælg en af følgende funktioner:
" Response.Write "

" Response.Write "
|  | Rediger profil
" Response.Write "
|  | Rediger gæstebog
" Response.Write "

" Conn.Close Set Conn = Nothing %> <% Case "gbedit" strSQL = "Select * from gb Where bruger = '" & session("crew") & "' Order by id desc" Set rs = Conn.Execute(strSQL) Response.Write "For at få yderligere information om indlæget, som blandt andet ip adresse, skal der klippes på info knappen over for det ønskede indlæg.

" If Not (rs.BOF Or rs.EOF) Then Do Response.Write "

" & rs("navn") & ": " & left(rs("besked"),60) & "..

| info |  |  |  | slet |

" rs.MoveNext Loop While Not rs.EOF Else Response.Write "
Gæstebogen er tom for indlæg.
" End if Conn.Close Set Conn = Nothing Response.Write "

" %> <% Case "gbainf" Function StripHtml(Str) Str = Replace(Str, vbCrLf, "
") StripHtml = Str End Function strSQL = "Select * From gb Where id = " & Request.QueryString("nummer") & " AND bruger = '" & session("crew") & "'" Set rs = Conn.Execute(strSQL) If Not (rs.BOF Or rs.EOF) Then Response.Write "Indlæg af " & rs("navn") & ":

Ip adresse: | " & rs("ip") & "
Dato: | " & rs("dato") & "
Antal tegn i besked: | " & len(besked) & "
Besked: " & StripHtml(rs("besked")) & "

" Response.write "

| oversigt |  |  |  | slet |

" Else Response.Write "OBS: Dit valgte indlæg findes ikke." End if Conn.Close Set Conn = Nothing %> <% Case "slet" strSQL = "Delete * From gb Where Id = " & Request.Querystring("nr") Conn.Execute(strSQL) Conn.Close Set Conn = Nothing Response.Redirect "index.asp?side=gbedit&id=" & Request.Querystring("id") %> <% Case "rediger" strSQL = "Select * from nyheder Where Id = " & session("crew") Set rs = Conn.Execute(strSQL) strVTing = rs("ting") strVBG = rs("bg") Response.Write " " Response.Write "Oplysninger om bruger:

HøjHus navn: * |
| oprettet: " & rs("dato") & "
Kode: * |
| sidste login: " & rs("sl") & "
Rigtige navn: |
By: |
Alder: * |

" Response.Write "Oplysninger om HøjHuset:

Yndlings ting: |
| din yndlings ting: " & strVTing & "
Yndlings bg:
| din yndlings baggrund: " & strVBG & "

Yndlings rum:

" Response.Write "Oplysninger om kontakt:

Email: |
ICQ:
Hjemmeside uden http://
MSN:

" Response.Write "

| fritekst:

" & rs("fritekst") & "
* = Feltet skal udfyldes.
" %>

| gem ændringer |

<% Conn.Close Set Conn = Nothing %> <% Case "opdater" if len(Server.HTMLEncode(Request("alder"))) = 0 then Response.Write "OBS: Du skal indtaste din alder." elseif len(Server.HTMLEncode(Request("kode"))) = 0 then Response.Write "OBS: Du skal indtaste din kode." elseif len(Server.HTMLEncode(Request.Form("email"))) > 0 AND InStr(1, Server.HTMLEncode(Request.Form("email")), "@", 1) = 0 Then Response.Write "OBS: Din email er ugyldig." elseif len(Server.HTMLEncode(Request.Form("email"))) > 0 AND InStr(1, Server.HTMLEncode(Request.Form("email")), ".", 1) = 0 Then Response.Write "OBS: Din email er ugyldig." elseif len(Server.HTMLEncode(Request.Form("email"))) > 0 AND len(Server.HTMLEncode(Request.Form("email"))) < 6 Then Response.Write "OBS: Din email er ugyldig." elseif len(Server.HTMLEncode(Request.Form("msn"))) > 0 AND InStr(1, Server.HTMLEncode(Request.Form("msn")), "@", 1) = 0 Then Response.Write "OBS: Din MSN er ugyldig." elseif len(Server.HTMLEncode(Request.Form("msn"))) > 0 AND InStr(1, Server.HTMLEncode(Request.Form("msn")), ".", 1) = 0 Then Response.Write "OBS: Din MSN er ugyldig." elseif len(Server.HTMLEncode(Request.Form("msn"))) > 0 AND len(Server.HTMLEncode(Request.Form("msn"))) < 6 Then Response.Write "OBS: Din MSN er ugyldig." elseif len(Server.HTMLEncode(Request.Form("hp"))) > 0 AND len(Server.HTMLEncode(Request.Form("hp"))) < 4 Then Response.Write "OBS: Din hjemmeside er ugyldig." elseif len(Server.HTMLEncode(Request.Form("hp"))) > 0 AND InStr(1, Server.HTMLEncode(Request.Form("hp")), ".", 1) = 0 Then Response.Write "OBS: Din hjemmeside er ugyldig." elseif len(Server.HTMLEncode(Request.Form("hp"))) > 0 AND not InStr(1, Server.HTMLEncode(Request.Form("hp")), "http://", 1) = 0 Then Response.Write "OBS: Din hjemmeside skal skrives uden http:// ." else strSQL = "Update nyheder set " strSQL = strSQL & "navn = '" & Server.HTMLEncode(Request("navn")) & "', " strSQL = strSQL & "email = '" & Server.HTMLEncode(Request("email")) & "', " strSQL = strSQL & "fritekst = '" & Server.HTMLEncode(Request("fritekst")) & "', " strSQL = strSQL & "alder = '" & Server.HTMLEncode(Request("alder")) & "', " strSQL = strSQL & "beboelse = '" & Server.HTMLEncode(Request("beboelse")) & "', " strSQL = strSQL & "ting = '" & Server.HTMLEncode(Request("ting")) & "', " strSQL = strSQL & "bg = '" & Server.HTMLEncode(Request("bg")) & "', " strSQL = strSQL & "rum = '" & Server.HTMLEncode(Request("rum")) & "', " strSQL = strSQL & "icq = '" & Server.HTMLEncode(Request("icq")) & "', " strSQL = strSQL & "msn = '" & Server.HTMLEncode(Request("msn")) & "', " strSQL = strSQL & "andersen = '" & Request.Form("kode") & "', " strSQL = strSQL & "hp = '" & Server.HTMLEncode(Request("hp")) & "', " strSQL = strSQL & "hhnavn = '" & Server.HTMLEncode(Request("hhnavn")) & "' " strSQL = strSQL & " Where Id = " & session("crew") Conn.Execute(strSQL) Conn.Close Set Conn = Nothing Response.Redirect "index.asp?side=adminlist&id=" & session("crew") end if %> <% Case Else Function StripHtml(Str) Str = Replace(Str, vbCrLf, "
") StripHtml = Str End Function strSQL = "Select * from nyheder Where id = " & Request.QueryString("id") Set rs = Conn.Execute(strSQL) if not (rs.EOF or rs.BOF) then strHHNavn = rs("hhnavn") else response.redirect "crew.asp" end if Conn.Close Set Conn = Nothing Set Conn = Server.CreateObject("ADODB.Connection") DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " DSN = DSN & "DBQ=" & Server.MapPath ("../../database/aviser.mdb") Conn.Open DSN set rscount = conn.execute("select count(id) as tags from aviser Where active = true AND forfatter = '" & strHHNavn & "'") tags = rscount("tags") set rscount = nothing Conn.Close Set Conn = Nothing Set Conn = Server.CreateObject("ADODB.Connection") DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " DSN = DSN & "DBQ=" & Server.MapPath ("../../database/aviser.mdb") Conn.Open DSN set rscount = conn.execute("select count(id) as tags from aviser Where active = True") avistags = rscount("tags") set rscount = nothing Conn.Close Set Conn = Nothing Set Conn = Server.CreateObject("ADODB.Connection") DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; " DSN = DSN & "DBQ=" & Server.MapPath ("../../database/crew.mdb") Conn.Open DSN strSQL = "Select * from nyheder Where id = " & Request.QueryString("id") Set rs = Conn.Execute(strSQL) If Not (rs.BOF Or rs.EOF) Then hhnavn = rs("hhnavn") email = rs("email") hp = rs("hp") fritekst = rs("fritekst") sl = rs("sl") Response.Write "" & hhnavn & "

Navn: " & rs("navn") & " | Yndlings ting: " & rs("ting") & "
" Response.Write "
Alder: " & rs("alder") & " | Yndlings baggrund: " & rs("bg") & "
" Response.Write "
By: " & rs("beboelse") & " | Yndlings rum: " & rs("rum") & "
" Response.Write "
" Response.Write "
MSN: " & rs("msn") & " |
" Response.Write "
ICQ: " & rs("icq") & " |
" Response.Write "
Email: " & email & " |
" Response.Write "
Hjemmeside: " & hp & " |
" Response.write "

" & hhnavn & " blev oprettet: | " & rs("dato") & "
" & hhnavn & "'s sidste login: | " & sl & "
Antal artikler: | " & tags & "
Artikel procent: | " & left(tags * 100 / avistags,4) & "%

" Response.Write "

" if len(fritekst) <> 0 then response.write "

| fritekst:

" & StripHtml(fritekst) & "

" end if Else Response.Redirect "crew.asp" End if Conn.Close Set Conn = Nothing End Select %>