andy2680
Starting Member
7 Posts |
Posted - 10 March 2005 : 16:28:13
|
The problem only occurs with users with pre-set post counts. People that are new to the forum are increasing fine.
Here is the code, my_Conn.Execute(strSql) is line 1136:
Err_Msg = "" if trim(Request.Form("Name")) = "" then Err_Msg = Err_Msg & "<li>You must set a UserName</li>" end if if (Instr(Request.Form("Name"), ">") > 0 ) or (Instr(Request.Form("Name"), "<") > 0) then Err_Msg = Err_Msg & "<li> > and < are not allowed in the UserName, Please Choose Another</li>" end if
'## Forum_SQL strSql = "SELECT M_NAME FROM " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " WHERE M_NAME = '" & Trim(ChkString(Request.Form("Name"), "SQLString")) &"' " strSql = strSql & " AND MEMBER_ID <> " & Trim(ChkString(Request.Form("Member_ID"), "SQLString")) &" " set rs = my_Conn.Execute (strSql)
if rs.BOF and rs.EOF then '## Do Nothing - proceed else Err_Msg = Err_Msg & "<li>UserName is already in use, <br>Please Choose Another</li>" end if rs.close set rs = nothing if strAuthType = "db" then if trim(Request.Form("Password")) = "" then Err_Msg = Err_Msg & "<li>You must set a Password</li>" end if if Len(Request.Form("Password")) > 25 then Err_Msg = Err_Msg & "<li>The Password can not be greater than 25 characters</li>" end if ' if Request.Form("Password") <> Request.Form("Password2") then ' Err_Msg = Err_Msg & "<li>The Passwords didn't match.</li>" ' end if end if if Request.Form("Email") = "" then Err_Msg = Err_Msg & "<li>You Must set an email address</li>" end if if EmailField(Request.Form("Email")) = 0 then Err_Msg = Err_Msg & "<li>You Must enter a valid email address</li>" end if if (lcase(left(Request.Form("Homepage"), 7)) <> "http://") and (lcase(left(Request.Form("Homepage"), 8)) <> "https://") and (Request.Form("Homepage") <> "") then Err_Msg = Err_Msg & "<li>You Must prefix the URL with <b>http://</b> or <b>https://</b></li>" end if if Len(Request.Form("Sig")) > 255 then Err_Msg = Err_Msg & "<li>The signature can not be greater than 255 characters. " Err_Msg = Err_Msg & "It now is <b>" & Len(Request.Form("Sig")) & "</b> characters long.</li>" end if if Err_Msg = "" then '## it is ok to update the profile if Trim(Request.Form("Homepage")) <> "" and lcase(trim(Request.Form("Homepage"))) <> "http://" and Trim(lcase(Request.Form("Homepage"))) <> "https://" then regHomepage = chkString(Request.Form("Homepage"),"url") else regHomepage = " " end if if Trim(Request.Form("LINK1")) <> "" and lcase(trim(Request.Form("LINK1"))) <> "http://" and Trim(lcase(Request.Form("LINK1"))) <> "https://" then regLink1 = chkString(Request.Form("LINK1"),"url") else regLink1 = " " end if if Trim(Request.Form("LINK2")) <> "" and lcase(trim(Request.Form("LINK2"))) <> "http://" and Trim(lcase(Request.Form("LINK2"))) <> "https://" then regLink2 = chkString(Request.Form("LINK2"),"url") else regLink2 = " " end if if Trim(Request.Form("PHOTO_URL")) <> "" and lcase(trim(Request.Form("PHOTO_URL"))) <> "http://" and Trim(lcase(Request.Form("PHOTO_URL"))) <> "https://" then regPhoto_URL = chkString(Request.Form("Photo_URL"),"url") else regPhoto_URL = " " end if '## Forum_SQL strSql = "UPDATE " & strMemberTablePrefix & "MEMBERS " strSql = strSql & " SET M_NAME = '" & chkString(Request.Form("Name"),"SQLString") & "'" if strAuthType = "nt" then strSql = strSql & ", M_USERNAME = '" & chkString(Request.Form("Account"),"SQLString") & "'" else if strAuthType = "db" then strSql = strSql & ", M_PASSWORD = '" & chkString(Request.Form("password"),"SQLString") & "'" end if end if strSql = strSql & ", M_EMAIL = '" & chkString(Request.Form("Email"),"SQLString") & "'" strSql = strSql & ", M_TITLE = '" & chkString(Request.Form("Title"),"SQLString") & "'" strSql = strSql & ", M_POSTS = " & chkString(Request.Form("Posts"),"SQLString") & " " strSql = strSql & ", M_COUNTRY = '" & chkString(Request.Form("Country"),"SQLString") & "'" if strICQ = "1" then strSql = strSql & ", M_ICQ = '" & chkString(Request.Form("ICQ"),"SQLString") & "'" end if if strYAHOO = "1" then strSql = strSql & ", M_YAHOO = '" & chkString(Request.Form("YAHOO"),"SQLString") & "'" end if if strAIM = "1" then strSql = strSql & ", M_AIM = '" & chkString(Request.Form("AIM"),"SQLString") & "'" end if if strHOMEPAGE = "1" then strSql = strSql & ", M_HOMEPAGE = '" & chkString(Request.Form("Homepage"),"SQLString" ) & "'" end if strSql = strSql & ", M_SIG = '" & chkString(Request.Form("Sig"),"message") & "'" strSql = strSql & ", M_LEVEL = " & chkString(Request.Form("Level"),"SQLString") if strfullName = "1" then strSql = strSql & ", M_FIRSTNAME = '" & chkString(Request.Form("FirstName"),"SQLString") & "'" strSql = strSql & ", M_LASTNAME = '" & chkString(Request.Form("LastName"),"SQLString") & "'" end if if strCity = "1" then strsql = strsql & ", M_CITY = '" & chkString(Request.Form("City"),"SQLString") & "'" end if if strState = "1" then strsql = strsql & ", M_STATE = '" & chkString(Request.Form("State"),"SQLString") & "'" end if ' strsql = strsql & ", M_HIDE_EMAIL = '" & chkString(Request.Form("HideMail"),"SQLString") & "'" if strPicture = "1" then strsql = strsql & ", M_PHOTO_URL = '" & chkString(Request.Form("Photo_URL"),"SQLString") & "'" end if if strFavLinks = "1" then strsql = strsql & ", M_LINK1 = '" & chkString(Request.Form("LINK1"),"SQLString") & "'" strSql = strSql & ", M_LINK2 = '" & chkString(Request.Form("LINK2"),"SQLString") & "'" end if if strAge = "1" then strSql = strsql & ", M_AGE = '" & chkString(Request.Form("Age"),"SQLString") & "'" end if if strMarStatus = "1" then strSql = strSql & ", M_MARSTATUS = '" & chkString(Request.Form("MarStatus"),"SQLString") & "'" end if if strSex = "1" then strSql = strsql & ", M_SEX = '" & chkString(Request.Form("Sex"),"SQLString") & "'" end if if strOccupation = "1" then strSql = strSql & ", M_OCCUPATION = '" & chkString(Request.Form("Occupation"),"SQLString") & "'" end if if strHobbies = "1" then strSql = strSql & ", M_HOBBIES = '" & chkString(Request.Form("Hobbies"),"message") & "'" end if if strQuote = "1" then strSql = strSql & ", M_QUOTE = '" & chkString(Request.Form("Quote"),"message") & "'" end if if strBio = "1" then strSql = strSql & ", M_BIO = '" & chkString(Request.Form("Bio"),"message") & "'" end if if strLNews = "1" then strsql = strsql & ", M_LNEWS = '" & chkString(Request.Form("LNews"),"message") & "'" end if strSql = strSql & " WHERE MEMBER_ID = " & ChkString(Request.Form("MEMBER_ID"), "SQLString")
my_Conn.Execute(strSql) if ChkString(Request.Form("Level"),"") = "1" then '## Forum_SQL - Remove the member from the moderator table strSql = "DELETE FROM " & strTablePrefix & "MODERATOR " strSql = strSql & " WHERE " & strTablePrefix & "MODERATOR.MEMBER_ID = " & ChkString(Request.Form("MEMBER_ID"), "SQLString")
my_Conn.Execute (strSql) end if |
 |
|