<%
' UltraApps Portal - FREE edition, Version 1.5
' (C) Copyright 2001 by UltraApps
' This program may be used and modified for your own use
' so long as this copyright notice and this comment remain intact.
' You are not permitted to sell or distribute modified version of this software
' View files/license.html for full Legal Information
' 
' Filename:Login.asp
'    Generated with CodeCharge 2.0.1


'-------------------------------
' Login CustomIncludes begin
%>

<!-- #INCLUDE FILE="Common.asp" -->
<!-- #INCLUDE FILE="Header.asp" -->
<!-- #INCLUDE FILE="Footer.asp" -->

<%
' Login CustomIncludes end
'-------------------------------

'===============================
' Save Page and File Name available into variables
'-------------------------------
sFileName = "Login.asp"
sTemplateFileName = "Login.html"
'===============================


'===============================
' Login PageSecurity begin
' Login PageSecurity end
'===============================

'===============================
' Login Open Event begin
Session("UserID") = Empty
Session("UserRights") = Empty
' Login Open Event end
'===============================


'===============================
'Save the name of the form and type of action into the variables
'-------------------------------
sAction = GetParam("FormAction")
sForm = GetParam("FormName")
'===============================

' Login Show begin
'===============================
' Perform the form's action
'-------------------------------
' Initialize error variables
'-------------------------------
sLoginErr = ""
sForgotErr = ""

'-------------------------------
' Select the FormAction
'-------------------------------
Select Case sForm
  Case "Login"
    LoginAction(sAction)
  Case "Forgot"
    ForgotAction(sAction)
end select
'===============================

'===============================
' Display page
'-------------------------------
' Load HTML template for this page
'-------------------------------
LoadTemplate sAppPath & sTemplateFileName, "main"
'-------------------------------
' Load HTML template of Header and Footer
'-------------------------------
LoadTemplate sHeaderFileName, "Header"
LoadTemplate sFooterFileName, "Footer"
'-------------------------------
SetVar "FileName", sFileName


'-------------------------------
' Step through each form
'-------------------------------
Header_Show
Footer_Show
Login_Show
LostTitle_Show
Forgot_Show
'-------------------------------
' Process page templates
'-------------------------------
Parse "Header", False
Parse "Footer", False
Parse "main", False
'-------------------------------
' Output the page to the browser
'-------------------------------
Response.write PrintVar("main")

' Login Show end

'-------------------------------
' Destroy all object variables
'-------------------------------

' Login Close Event begin
' Login Close Event end

cn.Close
Set cn = Nothing
UnloadTemplate
'===============================

'===============================
' Login Form Action
'-------------------------------
Sub LoginAction(sAction)
  sQueryString = GetParam("querystring")
  sPage = GetParam("ret_page")
  Select case sAction
    Case "login"

'-------------------------------
' Login Login begin
'-------------------------------
      sLogin = GetParam("Login")
      sPassword = GetParam("Password")
      bPassed = CLng(DLookUp("members", "count(*)", "member_login =" & ToSQL(sLogin, "Text") & " and member_password=" & ToSQL(sPassword, "Text")))

'-------------------------------
' Login OnLogin Event begin
' Login OnLogin Event end
'-------------------------------
      if bPassed > 0 then
'-------------------------------
' Login and password passed
'-------------------------------
        Session("UserID") = CStr(DLookUp("members", "member_id", "member_login =" & ToSQL(sLogin, "Text") & " and member_password=" & ToSQL(sPassword, "Text")))
        Session("UserRights") = CLng(DLookUp("members", "security_level_id", "member_login =" & ToSQL(sLogin, "Text") & " and member_password=" & ToSQL(sPassword, "Text")))
        cn.Close
        Set cn = Nothing
        if not(sPage = request.serverVariables("SCRIPT_NAME")) and not(isEmpty(sPage)) then
          response.redirect(sPage & "?" & sQueryString)
        end if
        response.redirect("Default.asp")
      else
        sLoginErr = "Login or Password is incorrect."
      end if
'-------------------------------
' Login Login end
'-------------------------------
    Case "logout"
'-------------------------------
' Logout action
'-------------------------------
'-------------------------------
' Login Logout begin
'-------------------------------

'-------------------------------
' Login OnLogout Event begin
' Login OnLogout Event end
'-------------------------------
      Session("UserID") = Empty
      Session("UserRights") = Empty
      cn.Close
      Set cn = Nothing
      if not isEmpty(sPage) then response.redirect(sPage & "?" & sQueryString)
      response.redirect(sFileName)
'-------------------------------
' Login Logout end
'-------------------------------
  End Select
End Sub
'===============================

'===============================
' Display Login Form
'-------------------------------
Sub Login_Show()
  Dim sFormTitle: sFormTitle = "Login"

'-------------------------------
' Login Show begin
'-------------------------------

'-------------------------------
' Login Open Event begin
' Login Open Event end
'-------------------------------
  SetVar "FormTitle", sFormTitle
  SetVar "sLoginErr", sLoginErr
  SetVar "querystring", GetParam("querystring")
  SetVar "ret_page", GetParam("ret_page")
'-------------------------------
' Login BeforeShow Event begin
' Login BeforeShow Event end
'-------------------------------
  if Session("UserID") = "" then
'-------------------------------
' User is not logged in
'-------------------------------
    SetVar "LogoutAct", ""
    SetVar "UserInd", ""
    SetVar "Login", ToHTML(GetParam("Login"))
    if sLoginErr = "" then
      SetVar "LoginError", ""
    else
      SetVar "sLoginErr", sLoginErr
      Parse "LoginError", False
	  End if
    Parse "LoginAct", false
  else
'-------------------------------
' User logged in
'-------------------------------
    SetVar "LoginError", ""
    SetVar "LoginAct", ""
    SetVar "UserID", DLookUp("members", "member_login", "member_id =" & Session("UserID"))
    Parse "UserInd", False
  end if
  Parse "FormLogin", False

'-------------------------------
' Login Close Event begin
' Login Close Event end
'-------------------------------

'-------------------------------
' Login Show end
'-------------------------------
End Sub
'===============================


'===============================
' Display Menu Form
'-------------------------------
Sub LostTitle_Show()
  Dim sFormTitle: sFormTitle = "Forgot Password ?"

'-------------------------------
' LostTitle Open Event begin
if getConfig("email_component")<"1" then
    SetVar "FormLostTitle","" 
    exit sub
end if
' LostTitle Open Event end
'-------------------------------

'-------------------------------
' Set URLs
'-------------------------------
  fldField1 = "<b>Please enter your login or email below.<br>We will email your password to you.</b>"
'-------------------------------
' LostTitle Show begin
'-------------------------------

  SetVar "FormTitle", sFormTitle

'-------------------------------
' LostTitle BeforeShow Event begin
' LostTitle BeforeShow Event end
'-------------------------------

'-------------------------------
' Show fields
'-------------------------------
  SetVar "Field1", fldField1
  Parse "FormLostTitle", False

'-------------------------------
' LostTitle Show end
'-------------------------------
End Sub
'===============================

'===============================
' Action of the Record Form
'-------------------------------
Sub ForgotAction(sAction)
'-------------------------------
' Initialize variables  
'-------------------------------
  Dim bExecSQL: bExecSQL = true
  Dim sActionFileName : sActionFileName = ""
  Dim sWhere : sWhere = "" 
  Dim bErr : bErr = False
  Dim pPKlogin : pPKlogin = ""
  Dim fldlogin : fldlogin = ""
'-------------------------------

'-------------------------------
' Forgot Action begin
'-------------------------------
  sActionFileName = "Login.asp"

'-------------------------------
' Load all form fields into variables
'-------------------------------
  fldlogin = GetParam("login")

'-------------------------------
' Validate fields
'-------------------------------
  if sAction = "insert" or sAction = "update" then
'-------------------------------
' Forgot Check Event begin
'Try finding this user
openrs member_rs,"SELECT member_id FROM members WHERE member_login=" & ToSQL(fldlogin,"text") & " OR member_email=" & ToSQL(fldlogin,"text")

if GetValue(member_rs, "member_id") = "" then sForgotErr = sForgotErr & chr(13) & "Sorry. We could not find this Login or Email in our records."
' Forgot Check Event end
'-------------------------------
    If len(sForgotErr) > 0 then
      exit sub
    end if
  end if
'-------------------------------


'-------------------------------
' Create SQL statement
'-------------------------------
  select case sAction
    case "insert"
'-------------------------------
' Forgot Insert Event begin
openrs member_rs,"SELECT member_login,member_password,member_email FROM members WHERE member_login=" & ToSQL(fldlogin,"text") & " OR member_email=" & ToSQL(fldlogin,"text")
while not member_rs.eof
  body=getConfig("lost_password_body")
  body=replace(body,"{login}",getvalue(member_rs,"member_login"))
  body=replace(body,"{password}",getvalue(member_rs,"member_password"))
  sendemail getvalue(member_rs,"member_email"),getConfig("sender_email"),"Registration confirmation",body
  member_rs.movenext
wend
' Forgot Insert Event end
'-------------------------------
  end select
'-------------------------------
  cn.Close
  Set cn = Nothing
  response.redirect sActionFileName
'-------------------------------
' Forgot Action end
'-------------------------------
end sub
'===============================

'===============================
' Display Record Form
'-------------------------------
Sub Forgot_Show()
'-------------------------------
' Forgot Show begin
'-------------------------------
  Dim sWhere : sWhere = ""
  Dim sFormTitle: sFormTitle = ""
  Dim bPK : bPK = True

'-------------------------------
' Load primary key and form parameters
'-------------------------------
  if sForgotErr = "" then
    plogin = GetParam("login")
    SetVar "ForgotError", ""
  else
    plogin = GetParam("PK_login")
    SetVar "sForgotErr", sForgotErr
    SetVar "FormTitle", sFormTitle
    Parse "ForgotError", False
  end if
'-------------------------------

'-------------------------------
' Load all form fields

  fldlogin = GetParam("login")
'-------------------------------

'-------------------------------
' Build WHERE statement

  if IsEmpty(plogin) then bPK = False
  
  sWhere = sWhere & "=" & ToSQL(plogin, "Text")
  SetVar "PK_login", plogin
'-------------------------------
'-------------------------------
' Forgot Open Event begin
if getConfig("email_component") < "1" then
    SetVar "FormForgot","" 
    exit sub
end if
' Forgot Open Event end
'-------------------------------

  SetVar "FormTitle", sFormTitle

'-------------------------------
' This form works only in insert mode
'-------------------------------
  bIsUpdateMode = false
'-------------------------------

'-------------------------------
' Load all fields into variables from recordset or input parameters
'-------------------------------
  if bIsUpdateMode then
    SetVar "ForgotDelete", ""
    SetVar "ForgotUpdate", ""
    SetVar "ForgotInsert", ""
'-------------------------------
' Forgot ShowEdit Event begin
' Forgot ShowEdit Event end
'-------------------------------
  else
    SetVar "ForgotEdit", ""
    Parse "ForgotInsert", False
'-------------------------------
' Forgot ShowInsert Event begin
' Forgot ShowInsert Event end
'-------------------------------
  end if
  SetVar "ForgotCancel", ""
'-------------------------------
' Forgot Show Event begin
' Forgot Show Event end
'-------------------------------

'-------------------------------
' Show form field
'-------------------------------
      SetVar "login", ToHTML(fldlogin)
  Parse "FormForgot", False

'-------------------------------
' Forgot Close Event begin
' Forgot Close Event end
'-------------------------------

Set rs = Nothing

'-------------------------------
' Forgot Show end
'-------------------------------
End Sub
'===============================
%>