OK her er de to sider:
AddNewForm.asp
<!-- #include file="QALib.asp" -->
<%
'***********************************************************
'* XCENT QuickAuction Copyright 2002 XCENT -
www.xcent.com *
'* QuickAuction is a trademark of XCENT *
'***********************************************************
sUserName = "" & RequestValue("UserName")
sPassword = "" & RequestValue("Password")
sTitle = "" & RequestValue("Title")
lCatID = FVal(RequestValue("Category"))
iDays = FVal(RequestValue("Days"))
sImageURL = "" & RequestValue("ImageURL")
sDescription = "" & RequestValue("Description")
fStartingBid = FVal(RequestValue("StartBid"))
fIncrement = FVal(RequestValue("Increment"))
aBold = "" & RequestValue("Bold")
vCloseDate = DateAdd("d", iDays, NOW)
sErrorMsg = ""
sCmd = "" & RequestValue("CMD")
Set objErr = CreateObject("Scripting.Dictionary")
DoPageHeader
OpenDBConn
TableHead(GLS_AddAuction)
Select Case sCmd
Case "POST"
If CheckForm Then
ShowPreview
Else
ShowForm
End If
Case Else
ShowForm
End Select
TableFoot
DoPageFooter
CloseDBConn
Set objErr = Nothing
Sub ShowPreview
userSQL = "SELECT * FROM tblQARegistration WHERE " & _
"regUserName = " & SQLStr(sUserName) & " AND regPassword = " & SQLStr(sPassword)
Set UserRS = gobjConnect.Execute(userSQL)
Response.Write gsAuctionTitleOpen & GLS_PreviewItem & gsAuctionTitleClose
Response.Write "<P align=""CENTER"">" & gsAuctionTextOpen & GLS_PreviewInstructions & gsAuctionTextClose & "</P>"
Response.Write "<TABLE BORDER=""0"" WIDTH=""" & giTableWidth & """ CELLSPACING=""0"" CELLPADDING=""3"" align=""CENTER"">"
Response.Write "<TR bgcolor=""" & gsLineColor & """><TD COLSPAN=""3""> </TD></TR>"
Response.Write "<TR bgcolor=""" & topcolor & """><TD COLSPAN=""3"" VALIGN=""bottom"">" & gsSubHeadOpen & sTitle & gsSubHeadClose & "</TD></TR>"
Response.Write "<TR bgcolor=""" & topcolor & """><TD>" & gsLabelOpen & GLS_CurrentBidDet & gsLabelClose & gsAuctionTextOpen & "--" & gsauctionTextclose & "<BR>"
Response.Write gsLabelOpen & GLS_ClosesDet & gsLabelClose & gsAuctionTextOpen & vCloseDate & gsAuctionTextClose & "</TD>"
Response.Write "<TD>" & gsLabelOpen & GLS_LocationDet & gsLabelClose & gsAuctionTextOpen & UserRS.Fields("regCity") & ", " & UserRS.Fields("regState") & " " & UserRS.Fields("regCountry") & gsAuctionTextClose & "<BR>"
Response.Write gsLabelOpen & GLS_OwnerDet & gsLabelClose & gsAuctionTextOpen & "<A HREF = ""mailto:" & UserRS.fields("regEmail") & chr(34) & ">" & UserRS.Fields("regUserName") & "</A>" & gsLabelClose & "<BR></TD>"
Response.Write "<TD> </TD></TR>"
Response.Write "<TR bgcolor=""" & gsLineColor & """><TD COLSPAN=""3""> </TD></TR>"
Response.Write "<TR><TD valign=""top"" height=""50"" COLSPAN=""3"">"
Response.Write gsAuctionTextOpen & sDescription & gsAuctionTextClose & "<P> </P></TD></TR>"
'Check for image
If LEN(TRIM(sImageURL)) > 0 Then
Response.Write "<TR><TD colspan=""3""><CENTER><IMG BORDER=""0"" SRC=""" & sImageURL & """></CENTER></TD></TR>"
End If
Response.Write "<TR><TD valign=""top"" height=""50"" COLSPAN=""3"">"
Response.Write gsLabelOpen & GLS_NextBid & FCurrency(fStartingBid) & gsLabelClose & "</TD></TR>"
Response.Write "<FORM METHOD=""POST"" ACTION=""QAPostItem.asp"">"
Response.Write "<TR><TD COLSPAN=""3""><HR>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""UserName"" Value=""" & sUserName & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Password"" Value=""" & sPassword & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Title"" Value=""" & Server.HTMLEncode(sTitle) & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Category"" Value=""" & lCatID & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Days"" Value=""" & iDays & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""ImageURL"" Value=""" & sImageURL & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Description"" Value=""" & Server.HTMLEncode(sDescription) & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""StartBid"" Value=""" & fStartingBid & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Increment"" Value=""" & fIncrement & """>"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""Bold"" Value=""" & aBold & """>"
Response.Write "<INPUT TYPE=""SUBMIT"" VALUE=""Submit""></TD><TD COLSPAN=""2""> </TD>"
Response.Write "</TABLE>"
UserRS.Close
Set UserRS = Nothing
End Sub
Sub ShowForm
Response.Write "<FONT FACE=""" & gsFont & """>"
Response.Write "<FORM METHOD=""POST"" ACTION=""QAAddNewForm.asp"">"
Response.Write "<INPUT TYPE=""HIDDEN"" NAME=""CMD"" VALUE=""POST"">"
Response.Write "<TABLE BORDER=""0"" CELLPADDING=""3"" CELLSPACING=""0"" WIDTH=""100%"">"
'Response.Write "<TR bgcolor=" & chr(34) & gsLineColor & chr(34) & ">"
Response.Write "<TD COLSPAN=""2"">"
Response.Write "</TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD COLSPAN=""2"">"
Response.Write gsSubHeadOpen & GLS_AddUserInfo & gsSubHeadClose
Response.Write "</TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD COLSPAN=""2"">"
Response.Write gsAuctionTextOpen & GLS_AddRegInfo & "<BR>" & GLS_HowToRegister & gsAuctionTextClose
Response.Write "</TD>"
Response.Write "</TR>"
If objErr.Exists("LOGIN") Then
Response.Write "<TR>"
Response.Write "<TD COLSPAN=""2"">"
Response.Write gsErrorTextOpen & objErr.Item("LOGIN") & gsErrorTextClose
Response.Write "</TD>"
Response.Write "</TR>"
End If
Response.Write "<TR>"
Response.Write "<TD>"& gsLabelOpen & GLS_UserNameDet & gsLabelHeadClose & "</TD>"
Response.Write "<TD><INPUT TYPE=""TEXT"" NAME=""UserName"" VALUE=""" & sUserName & """></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & GLS_Password & gsLabelClose & "</TD>"
Response.Write "<TD><INPUT TYPE=""PASSWORD"" NAME=""Password""></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD COLSPAN=""2"">"
Response.Write "<HR>"
Response.Write "</TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD COLSPAN=""2"">"
Response.Write gsSubHeadOpen & GLS_AddItemInfo & gsSubHeadClose
Response.Write "</TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & OutMatch(objErr.Exists("TITLE"), True, objErr.Item("TITLE"),GLS_Title) & gsLabelClose & "</TD>"
Response.Write "<TD><INPUT TYPE=""TEXT"" NAME=""Title"" SIZE=""40"" value=""" & sTitle & """ MAXLENGTH=""60""></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & OutMatch(objErr.Exists("CATEGORY"), True, objErr.Item("CATEGORY"),GLS_AddItemCat) & gsLabelClose & "</TD>"
Response.Write "<TD>"
Response.Write "<SELECT NAME=""Category"">"
GetCategories
Response.Write "</SELECT>"
Response.Write "</TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & OutMatch(objErr.Exists("DAYS"),True,objErr.Item("DAYS"),GLS_AddItemNumDays) & gsLabelClose & "</TD>"
Response.Write "<TD><INPUT TYPE=""TEXT"" NAME=""Days"" SIZE=""3"" VALUE=""" & OutMatch(iDays,0, "", iDays) & """> " & gsAuctionTextOpen & replace(GLS_MaxNumDays,"%MAX%",giMaxAuctionDays) & gsAuctionTextClose & "</TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & GLS_AddIMGURL & gsLabelClose & "<BR>" & gsAuctionTextOpen & GLS_IncludeHTTP & gsAuctionTextClose & "</TD>"
Response.Write "<TD><INPUT TYPE=""TEXT"" NAME=""ImageURL"" SIZE=""40"" MAXLENGTH=""255"" value=""" & sImageURL & """></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD VALIGN=""TOP"">" & gsLabelOpen & OutMatch(objErr.Exists("DESCRIPTION"), True, objErr.Item("DESCRIPTION"),GLS_AddItemDesc) & gsLabelClose & "</TD>"
Response.Write "<TD><TEXTAREA NAME=""Description"" COLS=""40"" ROWS=""7"">" & sDescription & "</TEXTAREA></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & OutMatch(objErr.Exists("BID"),True, objErr.Item("BID"),GLS_AddItemStartBid) & gsLabelClose & "</TD>"
Response.Write "<TD>" & gsMoneySymbol & "<INPUT TYPE=""TEXT"" NAME=""StartBid"" SIZE=""8"" VALUE=""" & OutMatch(fStartingBid,0,"",fStartingBid) & """></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & GLS_AddItemMinInc & gsLabelClose & "</TD>"
Response.Write "<TD>" & gsMoneySymbol & "<INPUT TYPE=""TEXT"" NAME=""Increment"" SIZE=""8"" VALUE=""" & OutMatch(fIncrement,0,gfDefaultBidIncrement,fIncrement) & """></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD>" & gsLabelOpen & GLS_Bold & "</TD>"
Response.Write "<TD><INPUT TYPE=""CHECKBOX"" NAME=""Bold"" VALUE=""" & aBold & """></TD>"
Response.Write "</TR>"
Response.Write "<TR>"
Response.Write "<TD> </TD>"
Response.Write "<TD><INPUT TYPE=""SUBMIT"" VALUE=""" & GLS_ButtonSubmit & """></TD>"
Response.Write "</TR>"
Response.Write "</TABLE>"
Response.Write "</FORM></FONT>"
End Sub
Sub GetCategories
sSQL = "SELECT * FROM tblQACategories ORDER BY catName "
Set rs = gobjConnect.Execute(sSQL)
If rs.eof Then
Response.Write "<OPTION VALUE=""0"">" & GLS_AddNoCatsDefined & "</OPTION>"
Else
Do While Not rs.eof
Response.Write "<OPTION VALUE=""" & rs.Fields("catID") & """>"
Response.Write rs.Fields("catName")
Response.Write "</OPTION>"
rs.MoveNext
Loop
End If
rs.Close
Set rs = Nothing
End Sub
Function CheckForm
If len(trim(sTitle)) = 0 Then
'sErrorMsg = sErrorMsg & GLS_NeedTitle & "<BR>"
objErr.Add "TITLE", gsErrorTextOpen & GLS_NeedTitle & gsErrorTextClose
End If
If len(trim(sDescription)) = 0 Then
'sErrorMsg = sErrorMsg & GLS_NeedTitle & "<BR>"
objErr.Add "DESCRIPTION", gsErrorTextOpen & GLS_NeedDescription & gsErrorTextClose
End If
If iDays > giMaxAuctionDays OR iDays <= 0 Then
'sErrorMsg = sErrorMsg & Replace(GLS_DaysErr, "%MAX%", giMaxAuctionDays) & "<BR>"
objErr.Add "DAYS", gsErrorTextOpen & Replace(GLS_DaysErr, "%MAX%", giMaxAuctionDays) & gsErrorTextClose
End If
If fStartingBid <= 0 then
'sErrorMsg = sErrorMsg & GLS_NeedStartingBid & "<BR>"
objErr.Add "BID", gsErrorTextOpen & GLS_NeedStartingBid & gsErrorTextClose
End if
If lCatID = 0 Then
objErr.Add "CATEGORY", gsErrorTextOpen & GLS_NoCategory & gsErrorTextClose
End If
regSQL = "SELECT regValidated FROM tblQARegistration WHERE regUserName = " & SQLStr(sUserName) & " AND regPassword = " & SQLStr(sPassword)
'Response.Write regSQL & "<br>"
Set regRS = gobjConnect.Execute(regSQL)
If NOT regRS.EOF then
If NOT EvalBool(regRS("regValidated")) Then
objErr.Add "LOGIN", GLS_PermissionMessage
End If
Else
objErr.Add "LOGIN", GLS_LoginErr
End If
regRS.Close
set regRS = Nothing
If objErr.Count > 0 Then
CheckForm = False
Else
CheckForm = True
End If
End Function
%>
OG PostItem:
<!-- #include file="QALib.asp" -->
<%
'***********************************************************
'* XCENT QuickAuction Copyright 2002 XCENT -
www.xcent.com *
'* QuickAuction is a trademark of XCENT *
'***********************************************************
sUserName = "" & RequestValue("UserName")
sPassword = "" & RequestValue("Password")
sTitle = "" & RequestValue("Title")
lCat = FVal(RequestValue("Category"))
iDays = FVal(RequestValue("Days"))
sImageURL = "" & RequestValue("ImageURL")
sDescription = "" & RequestValue("Description")
fStartingBid = FVal(RequestValue("StartBid"))
fIncrement = FVal(RequestValue("Increment"))
Bold = Request.Form("aBold")
vCloseDate = DateAdd("d", iDays, NOW)
lUserID = 0
OpenDBConn
DoPageHeader
TableHead GLS_AddAuction
regSQL = "SELECT regValidated,regID FROM tblQARegistration WHERE regUserName = " & SQLStr(sUserName) & " AND regPassword = " & SQLStr(sPassword) & " "
Set regRS = gobjConnect.Execute(regSQL)
If NOT regRS.EOF then
If EvalBool(regRS("regValidated")) Then
lUserID = FVal(regRS("regID"))
InsertAd
Else
PostDenied
End If
Else
PostDenied
End If
regRS.Close
set regRS = Nothing
TableFoot
DoPageFooter
CloseDBConn
Sub InsertAd
Set rsAuc = Server.CreateObject("ADODB.RecordSet")
rsAuc.Open "tblQAAuctions", gobjConnect, 1, 3, &H0002 'adOpenKeyset, adLockOptimistic, adCmdTable
rsAuc.AddNew
rsAuc("aucItemOwner") = lUserID
rsAuc("aucItemTitle") = sTitle
rsAuc("aucCategoryID") = lCat
rsAuc("aucImageURL") = sImageURL
rsAuc("aucEnded") = "N"
rsAuc("aucEmailsSent") = "N"
rsAuc("aucAvailDate") = Now
rsAuc("aucCloseDate") = vCloseDate
rsAuc("aucStartingBid") = fStartingBid
rsAuc("aucMinimumIncrement") = fIncrement
rsAuc("aucCurrentBid") = 0
rsAuc("Bold") = aBold
rsAuc("aucCurrentBidder") = 0
rsAuc("aucDescription") = sDescription
rsAuc.Update
lAucID = rsAuc("aucID")
rsAuc.Close
set rsAuc = Nothing
Response.Write "<BR>" & gsAuctionTextOpen & GLS_SuccessfulPost & "<BR>"
Response.Write GLS_PostView & "<A HREF=""QAViewItem.asp?ItemID=" & lAucID & """>" & gsAucURL & "QAViewItem.asp?ItemID=" & lAucID & "</A>" & gsAuctionTextClose &"<BR><BR>"
End Sub
Sub PostDenied
Response.Write "<P align=""CENTER"">" & gsAuctionTextOpen
Response.Write GLS_LoginErr & "<BR>"
Response.Write GLS_GoBack & "<BR>"
Response.Write GLS_HowtoRegister & "<BR>" & GLS_PermissionMessage & gsAuctionTextClose & "</P>"
End Sub
%>