Snitz Forums 2000
Snitz Forums 2000
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 Help Groups for Snitz Forums 2000 Users
 Help: MOD Implementation
 Friends Mod - Confusion With Email Notification
 New Topic
 Printer Friendly
Previous Page
Author Previous Topic Topic Next Topic
Page: of 2

Carefree
Advanced Member

Philippines
4207 Posts

Posted - 31 December 2013 :  13:56:13  Show Profile
Not using the friends mod, will test as a stand-alone and get back to you in a few minutes. OK - tested using a check for null and it works here. If the above doesn't work, please post a link to your file for me to see.

Edited by - Carefree on 31 December 2013 14:02:20
Go to Top of Page

MaGraham
Senior Member

USA
1297 Posts

Posted - 31 December 2013 :  16:09:58  Show Profile
quote:
Originally posted by Carefree
[br If the above doesn't work, please post a link to your file for me to see.


Here ya go. . .

<%
'#################################################################################
'##
'## USER SPACE MOD by cripto9t
'##
'## Version 1.1.02
'##
'## Date 02/14/08
'##
'## This file is not part of the Snitz Forum 2000 base code
'##
'## It is a file from the "User Space" modification for Snitz Forum 2000 version 3.4.06
'##
'#################################################################################
%>
<!--#INCLUDE FILE="config.asp"-->
<!--#INCLUDE FILE="inc_header_short.asp"-->
<!--#INCLUDE FILE="inc_sha256.asp"-->
<%

'Set values to suit your needs
'Values do not apply to mods and admins
Const blnLimit = true            'boolean  holds member limits switch
Const intBookmarkMax = 100       'numeric  holds max num of bookmarks a member can have
Const intFriendMax = 5000         'numeric  holds max num of friends a member can have

Dim blnDel
Dim memID
Dim strEncodedPassword
Dim Mode,intMode
Dim strAction

blnDel = false  'because you need proper credentials to delete

if mLev < 1 or MemberID < 1 then
        getErrMsg "You Must be logged in to view this page."
end if

strEncodedPassword = trim(Request.Cookies(strUniqueID & "User")("Pword"))

Mode = ChkString(trim(lcase(Request.QueryString("mode"))), "sqlstring")

'need to store member id in another variable if admin is on the prowl
if mLev = 4 and (trim(Request.Querystring("memid")) <> "" and isNumeric(Request.Querystring("memid"))) = true then
        blnDel = true
        memID = cLng(Request.Querystring("memid"))
else
        memID = MemberID
end if

'## Stop page right here if feature variable is "off" or nonexeistent.
'## or assign some values
Select case Mode
        case "draft"
                call chkVariable (strUSDraftSwitch,"Drafts")
                intMode = 2
        case "bookmark"
                call chkVariable (strUSBookmarkSwitch,"Bookmarks")
                intMode = 3
                intMax = intBookmarkMax
        case "friends"
                call chkVariable(strUSFriendSwitch,"Friends")
                intMode = 4
                intMax = intFriendMax
        'case "enemy"
        '        call chkVariable(strUSEnemySwitch,"Enemies")
        case else
                Response.Redirect "default.asp"
end select



Select case intMode
        '## Start draft section
        case 2
               if trim(Request.QueryString("draft_id")) <> "" and isNumeric(Request.QueryString("draft_id")) = true then
                       DraftID = cLng(Request.QueryString("draft_id"))
               else
                       DraftID = ""
               end if
               if DraftID <> "" then
                       Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ name=""draft"" id=""draft"" method=""post"">" &vbNewLine & _
                                       "  <input type=""hidden"" name=""action"" value=""delete"">" & vbNewLine & _
                                       "  <input type=""hidden"" name=""draftid"" value=""" & DraftID & """>" & vbNewLine
                        if blnDel then
                                Response.Write  "<input type=""hidden"" name=""memid"" value=""" & memID & """>" & vbnewLine
                        end if
                        Response.Write  "  <p align=""center""><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>Are you sure you want to delete this draft?</b></font></p>" & vbNewLine & _
                                        "  <br /><input type=""submit"" value=""Yes"" name=""draft"" id=""draft"">" & vbNewLine & _
                                        "</form>" & vbNewLine
               else
                       if trim(Request.Form("draftid")) <> "" then
                                if isNumeric(Request.Form("draftid")) = true then
                                        DraftID = cLng(Request.Form("draftid"))
                                else
                                        getErrMsg "Do Not Edit URL to Access this Page! 1"
                                end if
                       else
                                getErrMsg "Do Not Edit URL to Access this Page! 2"
                       end if
                       if mLev = 4 then
                                if trim(Request.Form("memid")) <> "" and isNumeric(Request.Form("memid")) then
                                        blnDel = true
                                        memID = cLng(Request.Form("memid"))
                                else
                                        blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,2,DraftID)
                                        memID = MemberID
                                end if
                        else
                                blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,2,DraftID)
                        end if

                        if blnDel = true then
                                strSql = "DELETE FROM " & strTablePrefix & "DRAFTS WHERE D_AUTHOR = " & memID & " AND DRAFT_ID = " & DraftID

                                my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords

                                if Err.description <> "" then
                                        getErrMsg "There was an error = " & Err.description
                                else
                                        Response.Write   "      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """><b>Draft Deleted!</b></font></p>" & vbNewLine & _
                                                        "      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
                                end if
                        else
                                getErrMsg "You Have No Permissions to Delete this Draft!!"
                        end if
                end if
        '## Bookmarks section
        case 3
                Dim strType
                if trim(Request.Querystring("action")) <> "" then
                        strAction = trim(lcase(Request.Querystring("action")))
                        if strAction = "add" then
                                if chkFolderCnt(MemberID,intMax,intMode) then
                                        getErrMsg "Your Bookmark Folder is Currently Full.<br />Forum limits are " & intMax & " bookmarks."
                                end if
                                strType = trim(lcase(Request.Querystring("type")))
                                if strType = "post" then
                                        if trim(Request.QueryString("topic_id")) <> "" then
                                                if isNumeric(Request.QueryString("topic_id")) = true then
                                                        Topic_ID = cLng(Request.QueryString("topic_id"))
                                                else
                                                        getErrMsg "Problem - not getting a numeric topic id"
                                                end if
                                        else
                                                getErrMsg "Problem - Not getting a topic id"
                                        end if

                                        if trim(Request.QueryString("reply_id")) <> "" then
                                                if isNumeric(Request.QueryString("reply_id")) = true then
                                                        Reply_ID = cLng(Request.QueryString("reply_id"))
                                                else
                                                        getErrMsg "Problem - not getting a numeric reply id"
                                                end if
                                        else
                                                Reply_ID = ""
                                        end if
                                        if trim(Request.QueryString("archive")) = "true" then
                                                strActivePrefix = strTablePrefix & "A_"
                                           ArchiveView = "true"
                                           ArchiveLink = "ARCHIVE=true&"
                                        else
                                                strActivePrefix = strTablePrefix
                                           ArchiveView = ""
                                           ArchiveLink = ""
                                        end if

                                        '# build url

                                        if inStr(strForumUrl,"default.asp/") then
                                                ForumLink = replace(strForumUrl,"default.asp/", "topic.asp")
                                        else
                                                ForumLink = strForumUrl & "topic.asp"
                                        end if
                                        ArchiveLink = ""
                                        PageLink = ""
                                        AnchorLink = ""

                                        if ArchiveView = "true" then
                                                ArchiveLink = "ARCHIVE=true&"
                                        end if
                                        if Reply_ID <> "" then
                                                PageLink = "whichpage=-1&"
                                                TopicLink = "TOPIC_ID=" & Topic_ID & "&"
                                                AnchorLink = "Reply_ID=" & Reply_ID
                                        else
                                                TopicLink = "TOPIC_ID=" & Topic_ID
                                        end if
                                        QueryLink = "?" & ArchiveLink & PageLink & TopicLink & AnchorLink


                                        strUrl = ForumLink & QueryLink

                                        '# Get topic subject

                                        strSql = "SELECT T_SUBJECT, F_SUBJECT " & _
                                                 " FROM " & strActivePrefix & "TOPICS T, " & strTablePrefix & "FORUM F " & _
                                                 " WHERE TOPIC_ID = " & Topic_ID & " AND T.FORUM_ID = F.FORUM_ID"

                                        set rs = Server.CreateObject("ADODB.Recordset")
                                        rs.open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText

                                        if rs.EOF then
                                                 getErrMsg "Do Not Edit the URL to gain access to this page!<br />Topic does not exist!"
                                        else
                                                if Reply_ID <> "" then
                                                        strTitle = chkString("Re-" & rs("T_SUBJECT"),"display")
                                                else
                                                        strTitle = chkString(rs("T_SUBJECT"),"display")
                                                end if
                                                ForumSubject = chkString(rs("F_SUBJECT"),"display")
                                        end if

                                        rs.close
                                        set rs = nothing
                                else
                                        if strType = "url" then
                                                '## nonforum link
                                                strUrl = ""
                                                strTitle = ""
                                        else
                                                getErrMsg "Do Not Edit URL to access this page.<br />Type Missing."
                                        end if
                                end if

                                '## get existing bookmark categories
                                strSql = "SELECT DISTINCT B_CAT FROM " & strTablePrefix & "BOOKMARKS WHERE B_MEMBER = " & MemberID & " ORDER BY B_CAT ASC;"

                                set rs = Server.CreateObject("ADODB.Recordset")
                                rs.open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText

                                if rs.EOF then
                                   CatCnt = ""
                                else
                                        allCatData = rs.GetRows(adGetRowsRest)
                                        CatCnt = UBound(allCatData,2)
                                end if

                                rs.close
                                set rs = nothing

                                '## Build form
                                Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ method=""post"" name=""bookmarks"" id=""bookmarks"">" & vbNewLine & _
                                                "<input type=""hidden"" name=""action"" value=""add"">" & vbNewLine & _
                                                "  <table border=""0px"" width=""95%"">" & vbNewLine & _
                                                "    <tr>" & vbNewLine & _
                                                "      <td align=""center"" colspan=""2""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """ color=""" & strDefaultFontColor & """><b>Bookmark</b></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine
                                if strtype = "post" then
                                        Response.Write  "    <tr>" & vbNewLine & _
                                                        "      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Default Category: </b></font></td>" & vbNewLine & _
                                                        "      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""defaultcategory"" value=""" & ForumSubject & """ readonly /></font></td>" & vbNewLine & _
                                                        "    </tr>" & vbNewLine
                                end if
                                '## list Categories
                                if CatCnt <> "" then
                                        Response.Write  "    <tr>" & vbNewLine & _
                                                        "      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Your Categorys: </b></font></td>" & vbNewLine & _
                                                        "      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """>" & vbNewLine & _
                                                        "          <select size=""1"" name=""oldcategory"">" & vbNewLine & _
                                                        "         <option value=""""></option>" & vbNewLine
                                        NewCat = 1
                                        for iCat = 0 to CatCnt
                                                CatSubject = allCatData(0,iCat)

                                                Response.Write  "          <option value=""" & chkString(CatSubject,"display") & """ "
                                                if trim(CatSubject) = trim(ForumSubject) then
                                                        Response.Write  "selected"
                                                        NewCat = 0
                                                end if
                                                Response.Write  ">" & chkString(CatSubject,"display") & "</option>" & vbNewLine

                                        next
                                        Response.Write  "      </select></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine
                                end if
                                Response.Write  "    <tr>" & vbNewLine & _
                                                "      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>New Category: </b></font></td>" & vbNewLine & _
                                                "      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""newcategory"" /></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine & _
                                                "    <tr>" & vbNewLine & _
                                                "      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Title: </b></font></td>" & vbNewLine & _
                                                "      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""title"" value=""" & strTitle & """ /></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine & _
                                                "    <tr>" & vbNewLine & _
                                                "      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Url: </b></font></td>" & vbNewLine & _
                                                "      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""url"" value=""" & strUrl & """"
                                if strType = "post" then Response.Write  "readonly"
                                Response.Write  " /></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine & _
                                                "    <tr>" & vbNewLine & _
                                                "      <td colspan=""2"" align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""submit"" name=""bookmarks"" id=""bookmarks"" value="" OK "" /> <input type=""reset"" value=""Reset"" id=""reset1"" name=""reset1""></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine & _
                                                "  </table>" & vbNewLine & _

                                                "</form>" & vbNewLine
                        else
                                if strAction = "delete" then
                                        if trim(Request.QueryString("id")) <> "" then
                                                if isNumeric(Request.QueryString("id")) = true then
                                                        BookMark_ID = cLng(Request.QueryString("id"))
                                                else
                                                        getErrMsg "Do Not Edit URL to access this page.<br />BookmarkID is not numeric."
                                                end if
                                        else
                                                getErrMsg "Do Not Edit URL to access this page.<br />BookmarkID is missing."
                                        end if
                                else
                                        getErrMsg "Do Not Edit URL to access this page.<br />Action is missing."
                                end if

                                Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ name=""bookmark"" id=""bookmark"" method=""post"">" &vbNewLine & _
                                                "  <input type=""hidden"" name=""action"" value=""delete"">" & vbNewLine & _
                                                "  <input type=""hidden"" name=""id"" value=""" & Bookmark_ID & """>" & vbNewLine
                                if blnDel then
                                        Response.Write  "  <input type=""hidden"" name=""memid"" value=""" & memID & """>" & vbNewLine
                                end if
                                Response.Write  "  <p align=""center""><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>Are you sure you want to delete this bookmark?</b></font></p>" & vbNewLine & _
                                                "  <br /><input type=""submit"" value=""Yes"" name=""bookmark"" id=""bookmark"">" & vbNewLine & _
                                                "</form>" & vbNewLine
                        end if
                else
                        if trim(Request.Form("action")) <> "" then
                                strAction = trim(lcase(Request.Form("action")))
                                if strAction = "add" then
                                        if trim(Request.Form("url")) <> "" then
                                                if IsValidURL(trim(Request.Form("url"))) then
                                                        strUrl = trim(Request.form("url"))
                                                else
                                                        errMsg = "Invalid URL - " & strURLError
                                                end if
                                        else
                                                getErrMsg "You must enter a url."
                                        end if
                                        if trim(Request.Form("title")) <> "" then
                                                strTitle = trim(Request.Form("title"))
                                        else
                                                getErrMsg "You must enter a title."
                                        end if
                                        if trim(Request.Form("defaultcategory")) <> "" then
                                                strDefCat = trim(Request.Form("defaultcategory"))
                                        else
                                                strDefCat = ""
                                        end if
                                        if trim(Request.Form("oldcategory")) <> "" then
                                                strOldCat = trim(Request.Form("oldcategory"))
                                        else
                                                strOldCat = ""
                                        end if
                                        if trim(Request.Form("newcategory")) <> "" then
                                                strNewCat = trim(Request.Form("newcategory"))
                                        else
                                                strNewCat = ""
                                        end if

                                        if strNewCat <> "" then
                                                strCat = strNewCat
                                        elseif strOldCat <> "" then
                                                strCat = strOldCat
                                        else
                                                strCat = strDefCat
                                        end if

                                        if strCat = "" then getErrMsg "You must enter a category."

                                        if errMsg <> "" then getErrMsg "" & errMsg & ""

                                        if addBookmark(MemberID,strUrl,strTitle,strCat) then
                                                Response.Write "      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """><b>Url was added to your bookmarks</b></font></p>" & vbNewLine & _
                                                                "      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
                              end if
                                else
                                        if strAction = "delete" then
                                                if trim(Request.Form("id")) <> "" then
                                                        if isNumeric(Request.Form("id")) = true then
                                                                BookmarkID = cLng(Request.Form("id"))
                                                        else
                                                                getErrMsg "Problem - Not getting a numeric bookmark id"
                                                        end if
                                                else
                                                        getErrMsg "Problem - Not getting a bookmark id."
                                                end if
                                                if mLev = 4 then
                                                        if trim(Request.Form("memid")) <> "" and isNumeric(Request.Form("memid")) then
                                                                blnDel = true
                                                                memID = cLng(Request.Form("memid"))
                                                        else
                                                                blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,3,BookmarkID)
                                                                memID = MemberID
                                                        end if
                                                else
                                              blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,3,BookmarkID)
                                                        memID = MemberID
                                                end if

                                                if blnDel = true then
                                                        if delBookmark(memID,BookmarkID) then
                                                                Response.Write   "      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """><b>Bookmark Deleted!</b></font></p>" & vbNewLine & _
                                                                                "      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
                                                        end if
                                                else
                                                        getErrMsg "You Have No Permissions to Delete this Bookmark!!"
                                                end if



                                        else
                                                getErrMsg "Do Not Edit URL to access this page.<br />Form action is not right."
                                        end if
                                end if
                        else
                                getErrMsg "Do Not Edit URL to access this page.<br />Form action is not right."
                        end if
               end if

       '## Start Friends Section
       case 4
                if trim(Request.Querystring("action")) <> "" then
                        strAction = trim(lcase(Request.Querystring("action")))

                        if trim(Request.Querystring("id")) <> "" then
                                if isNumeric(Request.Querystring("id")) = true then
                                        FriendID = cLng(Request.Querystring("id"))
                                else
                                        getErrMsg "Do not edit the URL to access this page"
                                end if
                        else
                                getErrMsg "Do not edit the URL to access this page."
                        end if

                        ' Part of ignore mod - coming soon
                        'if trim(Request.Querystring("type")) <> "" then
                        '        if isNumeric(Request.Querystring("type")) = true then
                        '                FriendType = cLng(Request.Querystring("type"))
                        '        else
                        '                getErrMsg "Do not edit the URL to access this page"
                        '        end if
                        'else
                        '        getErrMsg "Do not edit the URL to access this page."
                        'end if

                        select case strAction
                                case "add"
                                         if chkFolderCnt(MemberID,intFriendMax,intMode) then
                                                 getErrMsg "Your Friends folder is Currently Full.<br />Forum limits are " & intMax & " friends."
                                         end if
                                         strInputAction = "add"
                                case "delete"
                                         strInputAction = "delete"
                        end select
                        if strInputAction = "add" or strInputAction = "delete" then
                                Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ method=""post"" name=""friends"" id=""friends"">" & vbNewLine & _
                                                "<input type=""hidden"" name=""id"" value=""" & FriendID & """ />" & vbNewLine & _
                                                "<input type=""hidden"" name=""action"" value=""" & strInputAction & """ />" & vbNewLine
                                if blnDel then
                                        Response.Write  "<input type=""hidden"" name=""memid"" value=""" & memID & """>" & vbNewLine
                                end if

                                Response.Write  "  <table border=""0px"" width=""95%"">" & vbNewLine & _
                                                "    <tr>" & vbNewLine & _
                                                "      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """ color=""" & strDefaultFontColor & """><b>Friends</b></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine
                                if strInputAction = "add" then
                                        Response.Write  "    <tr>" & vbNewLine & _
                                                        "      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """>"
                                        'if FriendType = 0 then  IGNORE MOD
                                                Response.Write  "<b>Level:</b> A. <input type=""radio"" name=""level"" value=""0"" checked /> B. <input type=""radio"" name=""level"" value=""1"" /> C. <input type=""radio"" name=""level"" value=""2"" /><br />"
                                        'else
                                        '        Response.Write  " Ignore Member <input type=""radio"" name=""level"" value=""3"" checked /> Disallow Member <input type=""radio"" name=""level"" value=""4"" /><br />"
                                        'end if
                                        Response.Write  "      </td>" & vbNewLine & _
                                                        "    </tr>" & vbNewLine
                                end if

                                Response.Write  "    <tr>" & vbNewLine & _
                                                "      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>" & uCase(strInputAction)
                                if strInputAction = "add" then
                                        Response.Write  " to your friends list?"
                                else
                                        Response.Write  " from your friends list?"
                                end if
                                Response.Write  "</b></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine & _
                                                "    <tr>" & vbNewLine & _
                                                "      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""submit"" name=""friends"" id=""friends"" value="" Confirm "" /></font></td>" & vbNewLine & _
                                                "    </tr>" & vbNewLine & _
                                                "  </table>" & vbNewLine & _
                                                "</form>" & vbNewLine
                        else
                                getErrMsg "Do not edit the URL to access this page."
                        end if
                else
                        if trim(Request.Form("action")) <> "" then
                                strAction = trim(lcase(Request.Form("action")))

                                if trim(Request.Form("id")) <> "" and isNumeric(Request.Form("id")) = true then
                                        FriendID = cLng(Request.form("id"))
                                        elseif trim(Request.Querystring("id")) <> "" and isNumeric(Request.Querystring("id")) = true then

                                              FriendID = cLng(Request.Querystring("id"))

                                else
                                        getErrMsg "Problem - Not getting needed form input - id."
                                end if

                                select case strAction
                                        case "add"
                                                '## check for self addition
                                                if MemberID = FriendID then getErrMsg "Adding yourself to your friends list is not allowed.<br />Do not edit URL to access this page"

                                                if trim(Request.Form("level")) <> "" and isNumeric(Request.Form("level")) = true then
                                                        FriendLevel = cLng(Request.form("level"))
                                                else
                                                        getErrMsg "Problem - Not getting needed form input - level."
                                                end if

                                                '## Check exists
                                                strSql = "SELECT M_NAME, M_EMAIL FROM " & strMemberTablePrefix & "MEMBERS " & _
                                                         "WHERE MEMBER_ID = " & FriendID

                                                set rs = Server.CreateObject("ADODB.Recordset")
                                                rs.open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText

                                                if rs.EOF or rs.BOF then
                                                        rs.close
                                                        set rs=nothing
                                                        getErrMsg "Member does not exist!"
                                                else
                                                        FriendName = rs("M_NAME")
                                                        FriendMail = rs("M_EMAIL")
                                                        rs.close
                                                        set rs=nothing

                                                        '## check for duplicate
                                                        if chkFriend(MemberID,FriendID) = true then
                                                                '## Add friend
                                                                if addFriend(MemberID,FriendID,FriendLevel) = true then
                                                                        getMsg FriendName & " has been added to your forum friends folder.<br /><br /><a href=""active.asp"">Back</a><br />"
                                                                else
                                                                        getErrMsg "Friends Problem - Should not be able to get this far."
                                                                end if
                                                        else
                                                                '## Error Msg
                                                        end if
                                                end if
                                        case "delete"
                                                if mLev = 4 then
                                                        if trim(Request.Form("memid")) <> "" and isNumeric(Request.Form("memid")) then
                                                                blnDel = true
                                                                memID = cLng(Request.Form("memid"))
                                                        else
                                                                blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,4,FriendID)
                                                                memID = MemberID
                                                                end if
                                                else
                                                        blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,4,FriendID)
                                                        memID = MemberID
                                                end if
                                                strSql = "SELECT FRIEND_ID, M_NAME " & _
                                                         "FROM " & strTablePrefix & "FRIENDS, " & strMemberTablePrefix & "MEMBERS " & _
                                                         "WHERE F_MEMBER = " & memID & " AND FRIEND_ID = " & FriendID & " AND MEMBER_ID = F_FRIEND"

                                                set rs = Server.CreateObject("ADODB.Recordset")
                                                rs.open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText

                                                if rs.EOF or rs.BOF then
                                                        rs.close
                                                        set rs=nothing
                                                        getErrMsg "Either Member is not in your friends folder or Member does not exist!<br /><br /><a href=""active.asp"">Back</a><br /><br />Do Not Edit URL to access this page!"
                                                else
                                                        fFriendID = rs("FRIEND_ID")
                                                        FriendName = rs("M_NAME")
                                                        rs.close
                                                        set rs=nothing

                                                        if blnDel = true then
                                                                if delFriend(memID,FriendID) = true then
                                                                        Response.Write  "      <p align=""center""><font size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """ face=""" & strDefaultFontFace & """><b>" & FriendName & " has been deleted from your forum friends folder.</b><br /><br /><b>Click on <font color=""#FF0000"">x</font> in top-right to close window.</b></font></p>" & vbNewLine & _
                                                                                        "      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
                                                                else
                                                                        getErrMsg "Friends Problem - Should not be able to get this far."
                                                                end if
                                                        end if
                                                end if
                                end select


                        else
                                getErrMsg "Do Not edit the URL to access this page.</font>"
                        end if
                end if

       case else
                getErrMsg "Please do not edit the url to gain access to this page!!!!"
end select
Response.Write "    <p><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """>Choose your friends wisely!</font></p>" & vbNewLine & _
      "    </font>" & vbNewLine & _
      "    </div>" & vbNewLine & _
      "    </td>" & vbNewLine & _
      "  </tr>" & vbNewLine & _
      "</table>" & vbNewLine & _
      "</body>" & vbNewLine & _
      "</html>" & vbNewLine
my_Conn.Close
set my_Conn = nothing
Response.End

sub getMsg(msg)
       Response.Write  "<p align=""center""><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>" & msg & "</b></font></p>" & vbNewline
       WriteFooterShort
       Response.End
end sub

sub getErrMsg(msg)
       Response.Write  "<p align=""center""><font color=""" & strHiLiteFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>" & msg & "</b></font></p>" & vbNewline
       WriteFooterShort
       Response.End
end sub

function chkFolderCnt(mMemID,fMax,fType)
        dim bTmp
        bTmp = false
        if mLev < 3 or blnLimit = true then
                dim strSql,rsChk
                dim strTable,strIDCol,strCol
                dim TotalFiles
                select case cLng(fType)
                        case 3
                                strTable = "BOOKMARKS"
                                strIDCol = "BOOKMARK_ID"
                                strCol = "B_MEMBER"
                        case 4
                                strTable = "FRIENDS"
                                strIDCol = "FRIEND_ID"
                                strCol = "F_MEMBER"
                end select

                strSql = "SELECT COUNT(" & strIDCol & ") AS TOTAL_FILES " & _
                         "FROM " & strTablePrefix & strTable & " " & _
                         "WHERE " & strCol & " = " & mMemID

                set rsChk = my_Conn.Execute (strSql)
                TotalFiles = rsChk(0).value
                rsChk.close
                set rsChk = nothing

               if TotalFiles < fMax then
                       'do nothing - # entries less than max
               else
                       bTmp = true
               end if
       end if

       chkFolderCnt = bTmp
end function

function chkCanEdit(mName,mPassword,fType,fID)
        dim bTmp,strSql,rsChk
        dim strTable,strIDCol,strCol,strMsg
        bTmp = false
        select case cLng(fType)
                case 2
                        strTable = "DRAFTS"
                        strIDCol = "DRAFT_ID"
                        strCol = "D_AUTHOR"
                case 3
                        strTable = "BOOKMARKS"
                        strIDCol = "BOOKMARK_ID"
                        strCol = "B_MEMBER"
                case 4
                        strTable = "FRIENDS"
                        strIDCol = "FRIEND_ID"
                        strCol = "F_MEMBER"
                case else
                        strMsg = "There has been an error.<br /><br /><a href=""active.asp"">Back</a>"
                        if mLev = 4 then
                                strMsg = strMsg & "Feature is out of range - function chkCanEdit."
                        else
                                strMsg = strMsg & "Please inform Amin."
                        end if
                        getErrMsg strMsg
        end select

        strSql = "SELECT " & strCol & ", M.MEMBER_ID, M.M_LEVEL, M.M_NAME " & _
                 "FROM " & strMemberTablePrefix & "MEMBERS M, " & strTablePrefix & strTable & " " & _
                 "WHERE M." & strDBNTSQLName & " = '" & mName & "' "
        if strAuthType="db" then
      strSql = strSql & " AND M.M_PASSWORD = '" & mPassword &"' "
   end If
        strSql = strSql & " AND " & strIDCol & " = " & fID & " "
        strSql = strSql & " AND M.M_STATUS = " & 1

        set rsChk = my_Conn.Execute (strSql)

        if rsChk.BOF or rsChk.EOF then
                'Do nothing
        else
                if cLng(rsChk("MEMBER_ID")) = cLng(rsChk(strCol)) then
                        bTmp = true  'author
                end if
        end if
        rsChk.close
        set rsChk = nothing
        chkCanEdit = bTmp
end function

Function IsValidURL(sValidate)
   Dim sInvalidChars
   Dim bTemp
   Dim i

   if trim(sValidate) = "" then IsValidURL = true : exit function
   sInvalidChars = """;+()*'<>"
   for i = 1 To Len(sInvalidChars)
      if InStr(sValidate, Mid(sInvalidChars, i, 1)) > 0 then bTemp = True
      if bTemp then strURLError = "<br />• cannot contain any of the following characters:  "" ; + ( ) * ' < > "
      if bTemp then Exit For
   next
   if not bTemp then
      for i = 1 to Len(sValidate)
         if Asc(Mid(sValidate, i, 1)) = 160 then bTemp = True
         if bTemp then strURLError = "<br />• cannot contain any spaces "
         if bTemp then Exit For
      next
   end if

   ' extra checks
   ' check to make sure URL begins with http:// or https://
   if not bTemp then
      bTemp = (lcase(left(sValidate, 7)) <> "http://") and (lcase(left(sValidate, 8)) <> "https://")
      if bTemp then strURLError = "<br />• must begin with either http:// or https:// "
   end if
   ' check to make sure URL is 255 characters or less
   if not bTemp then
      bTemp = len(sValidate) > 255
      if bTemp then strURLError = "<br />• cannot be more than 255 characters "
   end if
   ' no two consecutive dots
   if not bTemp then
      bTemp = InStr(sValidate, "..") > 0
      if bTemp then strURLError = "<br />• cannot contain consecutive periods "
   end if
   'no spaces
   if not bTemp then
      bTemp = InStr(sValidate, " ") > 0
      if bTemp then strURLError = "<br />• cannot contain any spaces "
   end if
   if not bTemp then
      bTemp = (len(sValidate) <> len(Trim(sValidate)))
      if bTemp then strURLError = "<br />• cannot contain any spaces "
   end if 'Addition for leading and trailing spaces

   ' if any of the above are true, invalid string
        IsValidURL = Not bTemp
End Function

function chkUrl(fStr)
        fStr = Replace(fStr,"#","&#")
        fStr = ChkString(fStr, "SQLString")
        chkUrl = fStr
end function

Sub chkVariable(strVar,strDesc)
        if trim(strVar) <> "" then
                if cLng(strVar) < 1 then
                        if mLev > 2 then
                                getErrMsg "Admin has " & strDesc & " turned off."
                        else
                                Response.Redirect "default.asp"
                        end if
                end if
        else
                if mLev = 4 then
                        getErrMsg strDesc & " could not be found in Database."
                else
                        Response.Redirect "default.asp"
                end if
        end if
end Sub

function addBookmark(iMemId,sUrl,sTitle,sCat)
        dim bTmp,strSql

        bTmp = false
        strSql = "INSERT INTO " & strTablePrefix & "BOOKMARKS(B_URL, B_MEMBER, B_TITLE, B_CAT, B_DATE" & _
                 ") VALUES (" & _
                 "'" & chkUrl(sUrl) & "', " & iMemID & ", '" & chkString(sTitle,"SQLString") & "', '" & chkString(sCat,"SQLString") & "', '" & DateToStr(strForumTimeAdjust) & "')"

        my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords

        if Err.description <> "" then
                getErrMsg "There was an error = " & Err.description
        else
                bTmp = true
        end if

        addBookmark = bTmp

end function

function delBookmark(iMemID,iBookmarkID)
        dim bTmp,strSql

        bTmp = false
        strSql = "DELETE FROM " & strTablePrefix & "BOOKMARKS " & _
                 "WHERE B_MEMBER = " & iMemID & " AND BOOKMARK_ID = " & iBookmarkID

        my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords

        if Err.description <> "" then
                getErrMsg "There was an error = " & Err.description
        else
                bTmp = true
        end if

        delBookmark = bTmp
end function

'## Friends Specific Functions ####################
function chkFriend(iMemID,iFriendID)
        dim bTemp,strSql,rsChk

        bTemp = false
        strSql = "SELECT F_FRIEND FROM " & strTablePrefix & "FRIENDS " & _
                 "WHERE F_MEMBER = " & iMemID & " AND F_FRIEND = " & iFriendID

        set rsChk = my_Conn.Execute (strSql)

        if rsChk.EOF or rsChk.BOF then
                bTemp = true
                rsChk.close
                set rsChk = nothing
        else
                rsChk.close
                set rsChk = nothing
                getErrMsg "Member already exists in your friends folder.<br /><br /><a href=""active.asp"">Back</a>"
                exit function
        end if

        chkFriend = bTemp

end function

function addFriend(iMemID,iFriendID,iLev)
        dim bTmp, strSql
        bTmp = false

        strSql = "INSERT INTO " & strTablePrefix & "FRIENDS " & _
                 "(F_MEMBER, F_FRIEND, F_LEVEL, F_DATE) VALUES " & _
                 "(" & iMemID & ", " & iFriendID & ", " & iLev & ", '" & DateToStr(strForumTimeAdjust) & "')"
'Response.Write strSql
'Response.End

        my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
        if err.description <> "" then
                getErrMsg err.description, 0
        else
                bTmp = true
        end if

        addFriend = bTmp

if strEmail = "1" then
      strRecipientsName = FriendName
      strRecipients = FriendMail
      strFrom = strSender
      strFromName = strForumTitle
      strsubject = strForumTitle & " Friends' List "
      strMessage = "Hello " & FriendName & vbNewline & vbNewline
      If Request("Confirm")>"" Then
         strMessage = strMessage & "You received this message from " & strForumTitle & " because " & strDBNTUserName & " confirmed your request for friendship on the forums at " & strForumURL & vbNewline & vbNewline
      Else
         strMessage = strMessage & "You received this message from " & strForumTitle & " because " & strDBNTUserName & " wishes to befriend you on the forums at " & strForumURL & vbNewline & vbNewline
         strMessage = strMessage & "To ignore " & strDBNTUserName & "'s request, simply do nothing." & vbNewline & vbNewline
         strMessage = strMessage & "To confirm " & strDBNTUserName & "'s request, click on link below or copy and paste link into your browser:  "  & strForumURL & "pop_user_space.asp?mode=friends&Confirm=1&action=add&id=" & MemberID & vbNewline & vbNewline
      End If
      strMessage = strMessage & "or, if you have already added " & strDBNTUserName & " as a friend, you can remove " & strDBNTUserName & " from your friends' list here:  " & strForumURL & "pop_user_space.asp?mode=friends&action=delete&id=" & MemberID & vbNewline & vbNewline
      %>
      <!--#INCLUDE FILE="inc_mail.asp" -->
      <%
   end if


end function

function delFriend(iMemID,iFriendID)
        dim bTmp, strSql
        bTmp = false

        strSql = "DELETE FROM " & strTablePrefix & "FRIENDS " & _
                 "WHERE F_MEMBER = " & iMemID & " AND FRIEND_ID = " & iFriendID

        my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
        if err.description <> "" then
                getErrMsg err.description, 0
        else
                bTmp = true
        end if

        delFriend = bTmp

end function

'## End Friends specifics

%>



"Do all the good you can, by all the means you can, in all the ways you can, at all the times you can, to all the people you can, as long as ever you can." - John Wesley
Go to Top of Page

Carefree
Advanced Member

Philippines
4207 Posts

Posted - 01 January 2014 :  05:32:41  Show Profile
I cleaned up the code a bit, but it should have worked. Please save your original and put this online, then I'll come and add you as a friend to see what it does.


<%
'###############################################################################
'##
'##	              Snitz Forums 2000 v3.4.07
'##
'###############################################################################
'##
'## Copyright © 2000-14 Michael Anderson, Pierre Gorissen,
'##	          Huw Reddick and Richard Kinser
'##
'## This program is free. You can redistribute and/or modify it under the
'## terms of the GNU General Public License as published by the Free Software
'## Foundation; either version 2 or (at your option) any later version.
'##
'## All copyright notices regarding Snitz Forums 2000 must remain intact in
'## the scripts and in the HTML output.  The "powered by" text/logo with a
'## link back to http://forum.snitz.com in the footer of the pages MUST
'## remain visible when the pages are viewed on the internet or intranet.
'##
'## This program is distributed in the hope that it will be useful but
'## WITHOUT ANY WARRANTY; without even an implied warranty of MERCHANTABILITY
'## or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
'## for more details.
'##
'## You should have received a copy of the GNU General Public License along
'## with this program; if not, write to:
'##
'##	          Free Software Foundation, Inc.
'##	          59 Temple Place, Suite 330
'##	          Boston, MA 02111-1307
'##
'## Support can be obtained from our support forums at:
'##
'##	            http://forum.snitz.com
'##
'## Correspondence and marketing questions can be sent to:
'##
'##	             manderson@snitz.com
'##
'###############################################################################
'##
'## User Space v3.4.07
'##     Author:  Cripto9t
'##
'###############################################################################
%>
<!--#INCLUDE FILE="config.asp"-->
<!--#INCLUDE FILE="inc_header_short.asp"-->
<!--#INCLUDE FILE="inc_sha256.asp"-->
<%
Const blnLimit = True	    'boolean  holds member limits switch
Const intBookmarkMax = 100       'numeric  holds max num of bookmarks a member can have
Const intFriendMax = 5000	 'numeric  holds max num of friends a member can have
Dim blnDel, memID, strEncodedPassword, Mode, intMode, strAction
blnDel = False
If mLev < 1 or MemberID < 1 Then
	getErrMsg "You Must be logged in to view this page."
End If
strEncodedPassword = Trim(Request.Cookies(strUniqueID & "User")("Pword"))
Mode = ChkString(Trim(lCase(Request.QueryString("mode"))), "sqlstring")
If mLev > 3 and (Trim(Request.QueryString("memid")) <> "" and isNumeric(Request.QueryString("memid"))) = True Then
	blnDel = True
	memID = cLng(Request.QueryString("memid"))
Else
	memID = MemberID
End If
Select Case Mode
	Case "draft"
		Call chkVariable (strUSDraftSwitch,"Drafts")
		intMode = 2
	Case "bookmark"
		Call chkVariable (strUSBookmarkSwitch,"Bookmarks")
		intMode = 3
		intMax = intBookmarkMax
	Case "friends"
		Call chkVariable(strUSFriendSwitch,"Friends")
		intMode = 4
		intMax = intFriendMax
	Case Else
		Response.Redirect "default.asp"
End Select
Select Case intMode
	Case 2
		If Trim(Request.QueryString("draft_id")) <> "" and isNumeric(Request.QueryString("draft_id")) = True Then
			DraftID = cLng(Request.QueryString("draft_id"))
		Else
			DraftID = ""
		End If
		If DraftID <> "" Then
			Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ name=""draft"" id=""draft"" method=""post"">" &vbNewLine & _
				"  <input type=""hidden"" name=""action"" value=""delete"">" & vbNewLine & _
				"  <input type=""hidden"" name=""draftid"" value=""" & DraftID & """>" & vbNewLine
			If blnDel Then
				Response.Write  "<input type=""hidden"" name=""memid"" value=""" & memID & """>" & vbnewLine
			End If
			Response.Write  "  <p align=""center""><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>Are you sure you want to delete this draft?</b></font></p>" & vbNewLine & _
				"  <br /><input type=""Submit"" value=""Yes"" name=""draft"" id=""draft"">" & vbNewLine & _
				"</form>" & vbNewLine
		Else
			If Trim(Request.Form("draftid")) <> "" Then
				If isNumeric(Request.Form("draftid")) = True Then
					DraftID = cLng(Request.Form("draftid"))
				Else
					getErrMsg "Do Not Edit URL to Access this Page! 1"
				End If
			Else
				getErrMsg "Do Not Edit URL to Access this Page! 2"
			End If
			If mLev > 3 Then
				If Trim(Request.Form("memid")) <> "" and isNumeric(Request.Form("memid")) Then
					blnDel = True
					memID = cLng(Request.Form("memid"))
				Else
					blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,2,DraftID)
					memID = MemberID
				End If
			Else
				blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,2,DraftID)
			End If
			If blnDel = True Then
				strSql = "DELETE FROM " & strTablePrefix & "DRAFTS WHERE D_AUTHOR = " & memID & " AND DRAFT_ID = " & DraftID
				my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
				If Err.Description <> "" Then
					getErrMsg "There was an error = " & Err.Description
				Else
					Response.Write   "      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """><b>Draft Deleted!</b></font></p>" & vbNewLine & _
                                                        "      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
				End If
			Else
				getErrMsg "You Have No Permissions to Delete this Draft!!"
			End If
		End If
	Case 3
		Dim strType
		If Trim(Request.QueryString("action")) <> "" Then
			strAction = Trim(lCase(Request.QueryString("action")))
			If strAction = "add" Then
				If chkFolderCnt(MemberID,intMax,intMode) Then
					getErrMsg "Your Bookmark Folder is Currently Full.<br />Forum limits are " & intMax & " bookmarks."
				End If
				strType = Trim(lCase(Request.QueryString("type")))
				If strType = "post" Then
					If Trim(Request.QueryString("topic_id")) <> "" Then
						If isNumeric(Request.QueryString("topic_id")) = True Then
							Topic_ID = cLng(Request.QueryString("topic_id"))
						Else
							getErrMsg "Problem - not getting a numeric topic id"
						End If
					Else
						getErrMsg "Problem - Not getting a topic id"
					End If
					If Trim(Request.QueryString("reply_id")) <> "" Then
						If isNumeric(Request.QueryString("reply_id")) = True Then
							Reply_ID = cLng(Request.QueryString("reply_id"))
						Else
							getErrMsg "Problem - not getting a numeric reply id"
						End If
					Else
						Reply_ID = ""
					End If
					If Trim(Request.QueryString("archive")) = "true" Then
						strActivePrefix = strTablePrefix & "A_"
						 ArchiveView = "true"
						 ArchiveLink = "ARCHIVE=true&"
					Else
						strActivePrefix = strTablePrefix
						ArchiveView = ""
						ArchiveLink = ""
					End If
					If inStr(strForumUrl,"default.asp/") Then
						ForumLink = replace(strForumUrl,"default.asp/", "topic.asp")
					Else
						ForumLink = strForumUrl & "topic.asp"
					End If
					ArchiveLink = ""
					PageLink = ""
					AnchorLink = ""
					If ArchiveView = "true" Then
						ArchiveLink = "ARCHIVE=true&"
					End If
					If Reply_ID <> "" Then
						PageLink = "whichpage=-1&"
						TopicLink = "TOPIC_ID=" & Topic_ID & "&"
						AnchorLink = "Reply_ID=" & Reply_ID
					Else
						TopicLink = "TOPIC_ID=" & Topic_ID
					End If
					QueryLink = "?" & ArchiveLink & PageLink & TopicLink & AnchorLink
					strUrl = ForumLink & QueryLink
					strSql = "SELECT T_SUBJECT, F_SUBJECT " & _
						 " FROM " & strActivePrefix & "TOPICS T, " & strTablePrefix & "FORUM F " & _
						 " WHERE TOPIC_ID = " & Topic_ID & " AND T.FORUM_ID = F.FORUM_ID"
					Set rs = Server.CreateObject("ADODB.Recordset")
					rs.Open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText
					If rs.EOF Then
						getErrMsg "Do Not Edit the URL to gain access to this page!<br />Topic does not exist!"
					Else
						If Reply_ID <> "" Then
							strTitle = chkString("Re-" & rs("T_SUBJECT"),"display")
						Else
							strTitle = chkString(rs("T_SUBJECT"),"display")
						End If
						ForumSubject = chkString(rs("F_SUBJECT"),"display")
						rs.Close
					End If
					Set rs = Nothing
				Else
					If strType = "url" Then
						strUrl = ""
						strTitle = ""
					Else
						getErrMsg "Do Not Edit URL to access this page.<br />Type Missing."
					End If
				End If
				strSql = "SELECT DISTINCT B_CAT FROM " & strTablePrefix & "BOOKMARKS WHERE B_MEMBER = " & MemberID & " ORDER BY B_CAT ASC;"
				Set rs = Server.CreateObject("ADODB.Recordset")
				rs.Open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText
				If rs.EOF Then
					CatCnt = ""
				Else
					allCatData = rs.GetRows(adGetRowsRest)
					CatCnt = UBound(allCatData,2)
					rs.Close
				End If
				Set rs = Nothing
				Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ method=""post"" name=""bookmarks"" id=""bookmarks"">" & vbNewLine & _
					"<input type=""hidden"" name=""action"" value=""add"">" & vbNewLine & _
					"  <table border=""0px"" width=""95%"">" & vbNewLine & _
					"    <tr>" & vbNewLine & _
					"      <td align=""center"" colspan=""2""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """ color=""" & strDefaultFontColor & """><b>Bookmark</b></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine
				If strtype = "post" Then
					Response.Write  "    <tr>" & vbNewLine & _
						"      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Default Category: </b></font></td>" & vbNewLine & _
						"      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""defaultcategory"" value=""" & ForumSubject & """ readonly /></font></td>" & vbNewLine & _
						"    </tr>" & vbNewLine
				End If
				If CatCnt <> "" Then
					Response.Write  "    <tr>" & vbNewLine & _
						"      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Your Categorys: </b></font></td>" & vbNewLine & _
						"      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """>" & vbNewLine & _
						"	  <select size=""1"" name=""oldcategory"">" & vbNewLine & _
						"	 <option value=""""></option>" & vbNewLine
					NewCat = 1
					For iCat = 0 to CatCnt
						CatSubject = allCatData(0,iCat)
						Response.Write  "	  <option value=""" & chkString(CatSubject,"display") & """ "
						If Trim(CatSubject) = Trim(ForumSubject) Then
							Response.Write  "selected"
							NewCat = 0
						End If
						Response.Write  ">" & chkString(CatSubject,"display") & "</option>" & vbNewLine
					Next
					Response.Write  "      </select></font></td>" & vbNewLine & _
						"    </tr>" & vbNewLine
				End If
				Response.Write  "    <tr>" & vbNewLine & _
					"      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>New Category: </b></font></td>" & vbNewLine & _
					"      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""newcategory"" /></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine & _
					"    <tr>" & vbNewLine & _
					"      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Title: </b></font></td>" & vbNewLine & _
					"      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""title"" value=""" & strTitle & """ /></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine & _
					"    <tr>" & vbNewLine & _
					"      <td align=""right""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>Url: </b></font></td>" & vbNewLine & _
					"      <td align=""left""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""text"" size=""40"" name=""url"" value=""" & strUrl & """"
				If strType = "post" Then Response.Write  "readonly"
				Response.Write  " /></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine & _
					"    <tr>" & vbNewLine & _
					"      <td colspan=""2"" align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""Submit"" name=""bookmarks"" id=""bookmarks"" value="" OK "" /> <input type=""reset"" value=""Reset"" id=""reset1"" name=""reset1""></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine & _
					"  </table>" & vbNewLine & _
					"</form>" & vbNewLine
			Else
				If strAction = "delete" Then
					If Trim(Request.QueryString("id")) <> "" Then
						If isNumeric(Request.QueryString("id")) = True Then
							BookMark_ID = cLng(Request.QueryString("id"))
						Else
							getErrMsg "Do Not Edit URL to access this page.<br />BookmarkID is not numeric."
						End If
					Else
						getErrMsg "Do Not Edit URL to access this page.<br />BookmarkID is missing."
					End If
				Else
					getErrMsg "Do Not Edit URL to access this page.<br />Action is missing."
				End If
				Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ name=""bookmark"" id=""bookmark"" method=""post"">" &vbNewLine & _
					"  <input type=""hidden"" name=""action"" value=""delete"">" & vbNewLine & _
					"  <input type=""hidden"" name=""id"" value=""" & Bookmark_ID & """>" & vbNewLine
				If blnDel Then
					Response.Write  "  <input type=""hidden"" name=""memid"" value=""" & memID & """>" & vbNewLine
				End If
				Response.Write  "  <p align=""center""><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>Are you sure you want to delete this bookmark?</b></font></p>" & vbNewLine & _
					"  <br /><input type=""Submit"" value=""Yes"" name=""bookmark"" id=""bookmark"">" & vbNewLine & _
					"</form>" & vbNewLine
			End If
		Else
			If Trim(Request.Form("action")) <> "" Then
				strAction = Trim(lCase(Request.Form("action")))
				If strAction = "add" Then
					If Trim(Request.Form("url")) <> "" Then
						If IsValidURL(Trim(Request.Form("url"))) Then
							strUrl = Trim(Request.Form("url"))
						Else
							errMsg = "Invalid URL - " & strURLError
						End If
					Else
						getErrMsg "You must enter a url."
					End If
					If Trim(Request.Form("title")) <> "" Then
						strTitle = Trim(Request.Form("title"))
					Else
						getErrMsg "You must enter a title."
					End If
					If Trim(Request.Form("defaultcategory")) <> "" Then
						strDefCat = Trim(Request.Form("defaultcategory"))
					Else
						strDefCat = ""
					End If
					If Trim(Request.Form("oldcategory")) <> "" Then
						strOldCat = Trim(Request.Form("oldcategory"))
					Else
						strOldCat = ""
					End If
					If Trim(Request.Form("newcategory")) <> "" Then
						strNewCat = Trim(Request.Form("newcategory"))
					Else
						strNewCat = ""
					End If
					If strNewCat <> "" Then
						strCat = strNewCat
					ElseIf strOldCat <> "" Then
						strCat = strOldCat
					Else
						strCat = strDefCat
					End If
					If strCat = "" Then getErrMsg "You must enter a category."
					If errMsg <> "" Then getErrMsg "" & errMsg & ""
					If addBookmark(MemberID,strUrl,strTitle,strCat) Then
						Response.Write "      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """><b>Url was added to your bookmarks</b></font></p>" & vbNewLine & _
							"      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
					End If
				Else
					If strAction = "delete" Then
						If Trim(Request.Form("id")) <> "" Then
							If isNumeric(Request.Form("id")) = True Then
								BookmarkID = cLng(Request.Form("id"))
							Else
								getErrMsg "Problem - Not getting a numeric bookmark id"
							End If
						Else
							getErrMsg "Problem - Not getting a bookmark id."
						End If
						If mLev > 3 Then
							If Trim(Request.Form("memid")) <> "" and isNumeric(Request.Form("memid")) Then
								blnDel = True
								memID = cLng(Request.Form("memid"))
							Else
								blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,3,BookmarkID)
								memID = MemberID
							End If
						Else
							blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,3,BookmarkID)
							memID = MemberID
						End If
						If blnDel = True Then
							If delBookmark(memID,BookmarkID) Then
								Response.Write   "      <p align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """><b>Bookmark Deleted!</b></font></p>" & vbNewLine & _
									"      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
							End If
						Else
							getErrMsg "You Have No Permissions to Delete this Bookmark!!"
						End If
					Else
						getErrMsg "Do Not Edit URL to access this page.<br />Form action is not right."
					End If
				End If
			Else
				getErrMsg "Do Not Edit URL to access this page.<br />Form action is not right."
			End If
		End If
	Case 4
		If Trim(Request.QueryString("action")) <> "" Then
			strAction = Trim(lCase(Request.QueryString("action")))
			If Trim(Request.QueryString("id")) <> "" Then
				If isNumeric(Request.QueryString("id")) = True Then
					FriendID = cLng(Request.QueryString("id"))
				Else
					getErrMsg "Do not edit the URL to access this page"
				End If
			Else
				getErrMsg "Do not edit the URL to access this page."
			End If
			Select Case strAction
				Case "add"
					If chkFolderCnt(MemberID,intFriendMax,intMode) Then
						getErrMsg "Your Friends folder is Currently Full.<br />Forum limits are " & intMax & " friends."
					End If
					strInputAction = "add"
				Case "delete"
					strInputAction = "delete"
			End Select
			If strInputAction = "add" or strInputAction = "delete" Then
				Response.Write  "<form action=""pop_user_space.asp?mode=" & Mode & """ method=""post"" name=""friends"" id=""friends"">" & vbNewLine & _
					"<input type=""hidden"" name=""id"" value=""" & FriendID & """ />" & vbNewLine & _
					"<input type=""hidden"" name=""action"" value=""" & strInputAction & """ />" & vbNewLine
				If blnDel Then
					Response.Write  "<input type=""hidden"" name=""memid"" value=""" & memID & """>" & vbNewLine
				End If
				Response.Write  "  <table border=""0px"" width=""95%"">" & vbNewLine & _
					"    <tr>" & vbNewLine & _
					"      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """ color=""" & strDefaultFontColor & """><b>Friends</b></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine
				If strInputAction = "add" Then
					Response.Write  "    <tr>" & vbNewLine & _
						"      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """>"
					Response.Write  "<b>Level:</b> A. <input type=""radio"" name=""level"" value=""0"" checked /> B. <input type=""radio"" name=""level"" value=""1"" /> C. <input type=""radio"" name=""level"" value=""2"" /><br />"
					Response.Write  "      </td>" & vbNewLine & _
						"    </tr>" & vbNewLine
				End If
				Response.Write  "    <tr>" & vbNewLine & _
					"      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """><b>" & uCase(strInputAction)
				If strInputAction = "add" Then
					Response.Write  " to your friends list?"
				Else
					Response.Write  " from your friends list?"
				End If
				Response.Write  "</b></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine & _
					"    <tr>" & vbNewLine & _
					"      <td align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """> <input type=""Submit"" name=""friends"" id=""friends"" value="" Confirm "" /></font></td>" & vbNewLine & _
					"    </tr>" & vbNewLine & _
					"  </table>" & vbNewLine & _
					"</form>" & vbNewLine
			Else
				getErrMsg "Do not edit the URL to access this page."
			End If
		Else
			If Trim(Request.Form("action")) <> "" Then
				strAction = Trim(lCase(Request.Form("action")))
				If Trim(Request.Form("id")) <> "" and isNumeric(Request.Form("id")) = True Then
					FriendID = cLng(Request.Form("id"))
				Else
					getErrMsg "Problem - Not getting needed form input - id."
				End If
				Select Case strAction
					Case "add"
						If MemberID = FriendID Then getErrMsg "Adding yourself to your friends list is not allowed.<br />Do not edit URL to access this page"
						If Trim(Request.Form("level")) <> "" and isNumeric(Request.Form("level")) = True Then
							FriendLevel = cLng(Request.Form("level"))
						Else
							getErrMsg "Problem - Not getting needed form input - level."
						End If
						strSql = "SELECT M_NAME, M_EMAIL FROM " & strMemberTablePrefix & "MEMBERS " & _
							"WHERE MEMBER_ID = " & FriendID
						Set rs = Server.CreateObject("ADODB.Recordset")
						rs.Open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText
						If rs.EOF or rs.BOF Then
							Set rs=Nothing
							getErrMsg "Member does not exist!"
						Else
							FriendName = rs("M_NAME")
							FriendMail = rs("M_EMAIL")
							rs.Close
							If chkFriend(MemberID,FriendID) = True Then
								If addFriend(MemberID,FriendID,FriendLevel) = True Then
									getMsg FriendName & " has been added to your forum friends' folder.<br /><br /><a href=""active.asp"">Back</a><br />"
								Else
									getErrMsg "Friends Problem - Should not be able to get this far."
								End If
							End If
						End If
						Set rs=Nothing
					Case "delete"
						If mLev > 3 Then
							If Trim(Request.Form("memid")) <> "" and isNumeric(Request.Form("memid")) Then
								blnDel = True
								memID = cLng(Request.Form("memid"))
							Else
								blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,4,FriendID)
								memID = MemberID
							End If
						Else
							blnDel = chkCanEdit(strDBNTUserName,strEncodedPassword,4,FriendID)
							memID = MemberID
						End If
						strSql = "SELECT FRIEND_ID, M_NAME " & _
							 "FROM " & strTablePrefix & "FRIENDS, " & strMemberTablePrefix & "MEMBERS " & _
							 "WHERE F_MEMBER = " & memID & " AND FRIEND_ID = " & FriendID & " AND MEMBER_ID = F_FRIEND"
						Set rs = Server.CreateObject("ADODB.Recordset")
						rs.Open strSql, my_Conn, adOpenForwardOnly, adLockReadOnly, adCmdText
						If rs.EOF or rs.BOF Then
							Set rs=Nothing
							getErrMsg "Either member is not in your friends' folder or member does not exist!<br /><br /><a href=""javascript:history(-1)"">Back</a><br /><br />Do Not Edit URL to access this page!"
						Else
							fFriendID = rs("FRIEND_ID")
							FriendName = rs("M_NAME")
							rs.Close
							If blnDel = True Then
								If delFriend(memID,FriendID) = True Then
									Response.Write  "      <p align=""center""><font size=""" & strDefaultFontSize & """ color=""" & strDefaultFontColor & """ face=""" & strDefaultFontFace & """><b>" & FriendName & " has been deleted from your forum friends folder.</b><br /><br /><b>Click on <font color=""#FF0000"">x</font> in top-right to close window.</b></font></p>" & vbNewLine & _
										"      <script language=""javascript1.2"">self.opener.location.reload();</script>" & vbNewLine
								Else
									getErrMsg "Friends Problem - Should not be able to get this far."
								End If
							End If
						End If
						Set rs=Nothing
					End Select
				Else
					getErrMsg "Do Not edit the URL to access this page.</font>"
				End If
			End If
		Case Else
			getErrMsg "Please do not edit the url to gain access to this page!!!!"
End Select
Response.Write "    <p><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """>Choose your friends wisely!</font></p>" & vbNewLine
WriteFooterShort
Response.End

Sub getMsg(msg)
	Response.Write  "<p align=""center""><font color=""" & strDefaultFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>" & msg & "</b></font></p>" & vbNewline
	WriteFooterShort
	Response.End
End Sub

Sub getErrMsg(msg)
	Response.Write  "<p align=""center""><font color=""" & strHiLiteFontColor & """ size=""" & strDefaultFontSize & """ face=""" & strDefaultFontFace & """><b>" & msg & "</b></font></p>" & vbNewline
	WriteFooterShort
	Response.End
End Sub

Function chkFolderCnt(mMemID,fMax,fType)
	Dim bTmp
	bTmp = False
	If mLev < 3 or blnLimit = True Then
		Dim strSql,rsChk
		Dim strTable,strIDCol,strCol
		Dim TotalFiles
		Select Case cLng(fType)
			Case 3
				strTable = "BOOKMARKS"
				strIDCol = "BOOKMARK_ID"
				strCol = "B_MEMBER"
			Case 4
				strTable = "FRIENDS"
				strIDCol = "FRIEND_ID"
				strCol = "F_MEMBER"
		End Select
		strSql = "SELECT COUNT(" & strIDCol & ") AS TOTAL_FILES " & _
			"FROM " & strTablePrefix & strTable & " " & _
			"WHERE " & strCol & " = " & mMemID
		Set rsChk = my_Conn.Execute (strSql)
		If not rsChk.EOF Then
			TotalFiles = rsChk(0).value
			rsChk.Close
		End If
		Set rsChk = Nothing
		If TotalFiles => fMax Then
			bTmp = True
		End If
	End If
	chkFolderCnt = bTmp
End Function

Function chkCanEdit(mName,mPassword,fType,fID)
	Dim bTmp,strSql,rsChk
	Dim strTable,strIDCol,strCol,strMsg
	bTmp = False
	Select Case cLng(fType)
		Case 2
			strTable = "DRAFTS"
			strIDCol = "DRAFT_ID"
			strCol = "D_AUTHOR"
		Case 3
			strTable = "BOOKMARKS"
			strIDCol = "BOOKMARK_ID"
			strCol = "B_MEMBER"
		Case 4
			strTable = "FRIENDS"
			strIDCol = "FRIEND_ID"
			strCol = "F_MEMBER"
		Case Else
			strMsg = "There has been an error.<br /><br /><a href=""javascript:history(-1)"">Back</a>"
			If mLev > 3 Then
				strMsg = strMsg & "Feature is out of range - Function chkCanEdit."
			Else
				strMsg = strMsg & "Please inform Amin."
			End If
			getErrMsg strMsg
	End Select
	strSql = "SELECT" & strCol & ", M.MEMBER_ID, M.M_LEVEL, M.M_NAME " & _
		"FROM " & strMemberTablePrefix & "MEMBERS M, " & strTablePrefix & strTable & " " & _
		"WHERE M." & strDBNTSQLName & " = '" & mName & "' "
	If strAuthType="db" Then
		strSql = strSql & " AND M.M_PASSWORD = '" & mPassword &"' "
	End If
	strSql = strSql & " AND " & strIDCol & " = " & fID & " "
	strSql = strSql & " AND M.M_STATUS = " & 1
	Set rsChk = my_Conn.Execute (strSql)
	If not (rsChk.BOF or rsChk.EOF) Then
		If cLng(rsChk("MEMBER_ID")) = cLng(rsChk(strCol)) Then
			bTmp = True  'author
		End If
		rsChk.Close
	End If
	Set rsChk = Nothing
	chkCanEdit = bTmp
End Function

Function IsValidURL(sValidate)
	Dim sInvalidChars, bTemp, i
	If Trim(sValidate) = "" Then IsValidURL = True : exit Function
	sInvalidChars = """;+()*'<>"
	For i = 1 To Len(sInvalidChars)
		If InStr(sValidate, Mid(sInvalidChars, i, 1)) > 0 Then bTemp = True
		If bTemp Then strURLError = "<br />• cannot contain any of the following characters:  "" ; + ( ) * ' < > "
		If bTemp Then Exit For
	Next
	If not bTemp Then
		For i = 1 to Len(sValidate)
			If Asc(Mid(sValidate, i, 1)) = 160 Then bTemp = True
			If bTemp Then strURLError = "<br />• cannot contain any spaces "
			If bTemp Then Exit For
		Next
	End If
	If not bTemp Then
		bTemp = (lCase(left(sValidate, 7)) <> "http://") and (lCase(left(sValidate, 8)) <> "https://")
		If bTemp Then strURLError = "<br />• must begin with either http:// or https:// "
	End If
	If not bTemp Then
		bTemp = len(sValidate) > 255
		If bTemp Then strURLError = "<br />• cannot be more than 255 characters "
	End If
	If not bTemp Then
		bTemp = InStr(sValidate, "..") > 0
		If bTemp Then strURLError = "<br />• cannot contain consecutive periods "
	End If
	If not bTemp Then
		bTemp = InStr(sValidate, " ") > 0
		If bTemp Then strURLError = "<br />• cannot contain any spaces "
	End If
	If not bTemp Then
		bTemp = (len(sValidate) <> len(Trim(sValidate)))
		If bTemp Then strURLError = "<br />• cannot contain any spaces "
	End If
	IsValidURL = Not bTemp
End Function

Function chkUrl(fStr)
	fStr = Replace(fStr,"#","#")
	fStr = ChkString(fStr, "SQLString")
	chkUrl = fStr
End Function

Sub chkVariable(strVar,strDesc)
	If Trim(strVar) <> "" Then
		If cLng(strVar) < 1 Then
			If mLev > 2 Then
				getErrMsg "Admin has " & strDesc & " turned off."
			Else
				Response.Redirect "default.asp"
			End If
		End If
	Else
		If mLev > 3 Then
			getErrMsg strDesc & " could not be found in Database."
		Else
			Response.Redirect "default.asp"
		End If
	End If
End Sub

Function addBookmark(iMemId,sUrl,sTitle,sCat)
	Dim bTmp,strSql
	bTmp = False
	Dim intTopicID
	intTopicID = Request.QueryString("topic_id")
	For i = 1 to len(chkUrl(sUrl))
		If mid(chkUrl(sUrl),i,1) = "=" Then
			strTopicID = mid(chkUrl(sUrl),i+1)
			intTopicID = cLng(strTopicID)
		End If
	Next
	strSql = "INSERT INTO " & strTablePrefix & "BOOKMARKS(B_URL, B_MEMBER, B_TITLE, B_CAT, B_DATE, B_TOPICID" & _
		") VALUES (" & _
		"'" & chkUrl(sUrl) & "', " & iMemID & ", '" & chkString(sTitle,"SQLString") & "', '" & chkString(sCat,"SQLString") & "', '" & DateToStr(strForumTimeAdjust) & "', " & intTopicID & ")"
	my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
	If Err.Description <> "" Then
		getErrMsg "There was an error = " & Err.Description
	Else
		bTmp = True
	End If
	addBookmark = bTmp
End Function

Function delBookmark(iMemID,iBookmarkID)
	Dim bTmp,strSql
	bTmp = False
	strSql = "DELETE FROM " & strTablePrefix & "BOOKMARKS " & _
		"WHERE B_MEMBER = " & iMemID & " AND BOOKMARK_ID = " & iBookmarkID
	my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
	If Err.Description <> "" Then
		getErrMsg "There was an error = " & Err.Description
	Else
		bTmp = True
	End If
	delBookmark = bTmp
End Function

Function chkFriend(iMemID,iFriendID)
	Dim bTemp,strSql,rsChk
	bTemp = False
	strSql = "SELECT F_FRIEND FROM " & strTablePrefix & "FRIENDS " & _
		"WHERE F_MEMBER = " & iMemID & " AND F_FRIEND = " & iFriendID
	Set rsChk = my_Conn.Execute (strSql)
	If rsChk.EOF or rsChk.BOF Then
		bTemp = True
		chkFriend = bTemp
		Set rsChk = Nothing
	Else
		rsChk.Close
		Set rsChk = Nothing
		getErrMsg "Member already exists in your friends' folder.<br /><br /><a href=""javascript:history(-1)"">Back</a>"
	End If
End Function

Function addFriend(iMemID,iFriendID,iLev)
	Dim bTmp, strSql
	bTmp = False
	strSql = "INSERT INTO " & strTablePrefix & "FRIENDS " & _
		"(F_MEMBER, F_FRIEND, F_LEVEL, F_DATE) VALUES " & _
		"(" & iMemID & ", " & iFriendID & ", " & iLev & ", '" & DateToStr(strForumTimeAdjust) & "')"
	my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
	If err.Description <> "" Then
		getErrMsg err.Description, 0
	Else
		bTmp = True
	End If
	addFriend = bTmp
	If strEmail = "1" Then
		strRecipientsName = FriendName
		strRecipients = FriendMail
		strFrom = strSender
		strFromName = strForumTitle
		strSubject = strForumTitle & " Friends' List "
		strMessage = "Hello " & FriendName & vbNewline & vbNewline
		If Request.QueryString("Confirm")>"" Then
			strMessage = strMessage & "You received this message from " & strForumTitle & " because " & strDBNTUserName & " confirmed your request for friendship on the forums at " & strForumURL & vbNewline & vbNewline
		Else
			strMessage = strMessage & "You received this message from " & strForumTitle & " because " & strDBNTUserName & " wishes to befriend you on the forums at " & strForumURL & vbNewline & vbNewline
			strMessage = strMessage & "To ignore " & strDBNTUserName & "'s request, simply do nothing." & vbNewline & vbNewline
			strMessage = strMessage & "To confirm " & strDBNTUserName & "'s request, click on link below or copy and paste link into your browser:  "  & strForumURL & "pop_user_space.asp?mode=friends&Confirm=1&action=add&id=" & MemberID & vbNewline & vbNewline
			strMessage = strMessage & "or, if you have already added " & strDBNTUserName & " as a friend, you can remove " & strDBNTUserName & " from your friends' list here:  " & strForumURL & "pop_user_space.asp?mode=friends&action=delete&id=" & MemberID & vbNewline & vbNewline
		End If
			%>
			<!--#INCLUDE FILE="inc_mail.asp" -->
			<%
	End If
End Function

Function delFriend(iMemID,iFriendID)
	Dim bTmp, strSql
	bTmp = False
	strSql = "DELETE FROM " & strTablePrefix & "FRIENDS " & _
		"WHERE F_MEMBER = " & iMemID & " AND FRIEND_ID = " & iFriendID
	my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
	If err.Description <> "" Then
		getErrMsg err.Description, 0
	Else
		bTmp = True
	End If
	delFriend = bTmp
End Function
%>

Edited by - Carefree on 01 January 2014 23:38:46
Go to Top of Page

MaGraham
Senior Member

USA
1297 Posts

Posted - 01 January 2014 :  06:37:11  Show Profile

When I try to add and/or delete a friend I receive the following error message, Carefree.


Microsoft VBScript compilation error '800a0400'

Expected statement

/fp/pop_user_space.asp, line 68

Case "draft"
^



"Do all the good you can, by all the means you can, in all the ways you can, at all the times you can, to all the people you can, as long as ever you can." - John Wesley
Go to Top of Page

Carefree
Advanced Member

Philippines
4207 Posts

Posted - 01 January 2014 :  11:56:40  Show Profile
On line 67, insert a space after the word "select"
Go to Top of Page

MaGraham
Senior Member

USA
1297 Posts

Posted - 01 January 2014 :  14:45:57  Show Profile

After adding the space, I received the following errors, Carefree.


Microsoft VBScript compilation error '800a0400'

Expected statement

/fp/pop_user_space.asp, line 83

Case 2
^



So, I added the space on line 82


Microsoft VBScript compilation error '800a0400'

Expected statement

/fp/pop_user_space.asp, line 398

Case "add"
^



So, I added the space on line 397


Microsoft VBScript compilation error '800a0400'

Expected statement

/fp/pop_user_space.asp, line 450

Case "add"
^



So, I added the space on line 449


Microsoft VBScript compilation error '800a0400'

Expected statement

/fp/pop_user_space.asp, line 544

Case 3
^



So, I added the space on line 543


Microsoft VBScript compilation error '800a0400'

Expected statement

/fp/pop_user_space.asp, line 574

Case 2
^



So, I added the space on line 573


Was doing all of that wrong?

I'm asking because now the "Confirm" button doesn't work when I attempt to add a friend.



"Do all the good you can, by all the means you can, in all the ways you can, at all the times you can, to all the people you can, as long as ever you can." - John Wesley
Go to Top of Page

Carefree
Advanced Member

Philippines
4207 Posts

Posted - 01 January 2014 :  15:00:56  Show Profile
Replace it with the one above, sorry. Knew I was too tired when I did that....
Go to Top of Page

MaGraham
Senior Member

USA
1297 Posts

Posted - 01 January 2014 :  15:32:19  Show Profile

The "Confirm" button works now. No error either.

However; I still receive the same email message, Carefree.



"Do all the good you can, by all the means you can, in all the ways you can, at all the times you can, to all the people you can, as long as ever you can." - John Wesley
Go to Top of Page

Carefree
Advanced Member

Philippines
4207 Posts

Posted - 01 January 2014 :  19:01:15  Show Profile
ok will come check on your site
Go to Top of Page

MaGraham
Senior Member

USA
1297 Posts

Posted - 02 January 2014 :  09:52:56  Show Profile

So sorry I am just now getting back to this, Carefree! I have a grandbaby with me today.

I just now did a test friend invite and it works PERFECT!

Gonna have some HAPPY members today! YEA!

Thank you so much for your help with this, Carefree! You are so very appreciated!



"Do all the good you can, by all the means you can, in all the ways you can, at all the times you can, to all the people you can, as long as ever you can." - John Wesley
Go to Top of Page

Carefree
Advanced Member

Philippines
4207 Posts

Posted - 02 January 2014 :  21:02:53  Show Profile
You're welcome.
Go to Top of Page

MaGraham
Senior Member

USA
1297 Posts

Posted - 09 May 2014 :  01:34:32  Show Profile

I just wanted to come back and thank you again for this, Carefree!





"Do all the good you can, by all the means you can, in all the ways you can, at all the times you can, to all the people you can, as long as ever you can." - John Wesley
Go to Top of Page
Page: of 2 Previous Topic Topic Next Topic  
Previous Page
 New Topic
 Printer Friendly
Jump To:
Snitz Forums 2000 © 2000-2021 Snitz™ Communications Go To Top Of Page
This page was generated in 0.8 seconds. Powered By: Snitz Forums 2000 Version 3.4.07