<!--#include file="conn.asp"-->
<!--#include file="func.asp"-->
<%dim action,username
action=request.QueryString("action")
username=request.Cookies("timesshop")("username")
select case action
'//收貨人信息
case "receiveaddr"
set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from [user] where username='"&username&"' ",conn,1,3
rs("recepit")=trim(request.form("recepit"))
rs("city")=trim(request.form("city"))
rs("address")=trim(request.form("address"))
rs("postcode")=cstr(request.form("postcode"))
rs("usertel")=trim(request.form("usertel"))
rs("deliverymethord")=int(request.form("deliverymethord"))
rs("paymethord")=int(request.form("paymethord"))
rs("sex")=int(request.form("sex"))
rs.Update
rs.Close
set rs=nothing
response.Write "<script language=javascript>alert('您的收貨信息保存成功！');history.go(-1);</script>"
response.End
'//用戶資料
case "customerinfo"
set rs=server.CreateObject("adodb.recordset")
rs.open "select useremail,realname,quesion,answer from [user] where username='"&username&"'",conn,1,3
rs("useremail")=trim(request.form("useremail"))
rs("realname")=trim(request.form("realname"))
rs("quesion")=trim(request.form("quesion"))
if trim(request.form("answer"))<>""then
rs("answer")=md5(trim(request.form("answer")))
end if
rs.update
rs.close
set rs=nothing
response.Write "<script language=javascript>alert('您的個人資料修改成功！');history.go(-1);</script>"
case "changepass"
set rs=server.CreateObject("adodb.recordset")
rs.open "select password from [user] where username='"&username&"'",conn,1,3
if md5(trim(request.form("password")))<>trim(rs("password")) then
response.Write "<script language=javascript>alert('對不起，您輸入的原密碼錯誤！');history.go(-1);</script>"
response.End
else
rs("password")=md5(trim(request.form("password1")))
rs.update
rs.close
set rs=nothing
response.Write "<script language=javascript>alert('密碼更改成功！');history.go(-1);</script>"
response.End
end if
'//取回密碼
case "repass"
set rs=server.CreateObject("adodb.recordset")
rs.open "select password from [user] where username='"&trim(request.form("username2"))&"'",conn,1,3
rs("password")=md5(trim(request.form("userpassword1")))
rs.update
rs.close
set rs=nothing
response.Write "<script language=javascript>alert('您的密碼取回成功，請登錄！');history.go(-1);</script>"
end select
conn.close
set conn=nothing
%>