<!--#include file="conn.asp" -->
<link rel="stylesheet" href="images/css.css" type="text/css">
<table border="0" align="center" width="612">
  <tr> 
    <td valign="top"> 
      <div align="center"><br>
          <table width="429" border="0" cellspacing="5" cellpadding="5" align="left">
            <tr> 
              <td bgcolor="#0086C6" class="t1" colspan="2" height="27"><b><font color="#FFFFFF">&#149; 
                重置密碼</font></b></td>
            </tr>
            <tr> 
              <td colspan="2"> 
                <div align="right"> 
                  
                <table border="0" cellspacing="3" cellpadding="5" align="left">
                  <tr> 
                    <td colspan="2"> 
                      <div align="left"><img src="images/!.gif" width="14" height="14" align="absmiddle"> 
                        第一步：輸入要重置密碼的用戶名</div>
                    </td>
                  </tr>
                  <%if trim(Request("step"))="" then%>
                  <form name="form2" method="post" action="?step=2">
                    <tr> 
                      <td>用戶名：</td>
                      <td> 
                        <input type="text" name="t1" class="input">
                      </td>
                    </tr>
                    <tr> 
                      <td>&nbsp; </td>
                      <td> 
                        <input type="submit" name="Submit" value="下一步" class="button">
                      </td>
                    </tr>
                  </form>
<%end if%>
                  <tr> 
                    <td colspan="2"> 
                      <div align="left"><img src="images/!.gif" width="14" height="14" align="absmiddle"> 
                        第二步：輸入用戶密碼提示問(wèn)題的答案</div>
                    </td>
                  </tr>
<%
if Request("step")=2 and Rq("t1")<>"" then
set rs=server.createobject("adodb.recordset")
sql="select * from 會(huì)員 where 用戶名='"&Rq("t1")&"'"
rs.open sql,conn,1,1
if rs.EOF then
call msgbox_j("錯(cuò)誤的用戶名","location.href='"&request.servervariables("HTTP_REFERER")&"'")
Response.end
end if
if isnull(rs("問(wèn)題")) or isnull(rs("答案")) then
call msgbox_j("該用戶沒(méi)有設(shè)置密碼提示功能\n請(qǐng)聯(lián)系管理員處理  ","location.href='"&request.servervariables("HTTP_REFERER")&"'")
Response.end
end if
session("Userask")=rs("答案")
%>
                  <form name="form2" method="post" action="?step=3">
                    <tr> 
                      <td> 
                        <div align="right">用戶名：</div>
                      </td>
                      <td><%=Request.form("t1")%> 
                        <input type="hidden" name="t2" value="<%=Request.form("t1")%>">
                      </td>
                    </tr>
                    <tr> 
                      <td> 
                        <div align="right">問(wèn) 題：</div>
                      </td>
                      <td><%=rs("問(wèn)題")%> </td>
                    </tr>
                    <tr> 
                      <td> 
                        <div align="right">答 案：</div>
                      </td>
                      <td> 
                        <input type="text" name="t3" class="input">
                      </td>
                    </tr>
                    <tr> 
                      <td>&nbsp; </td>
                      <td> 
                        <input type="submit" name="Submit2" value="下一步" class="button">
                      </td>
                    </tr>
                  </form>
<%
end if
%>
                  <tr> 
                    <td colspan="2"><img src="images/!.gif" width="14" height="14" align="absmiddle"> 
                      第三步：請(qǐng)輸入新密碼</td>
                  </tr>
<%
if Request("step")=3 and Request.form("t3")<>"" then
if md5(Request.form("t3"),32)<>session("Userask") then
call msgbox_j("密碼提示問(wèn)題答案錯(cuò)誤 ","location.href='src_5.asp';")
end if
%>
                  <form name="form2" method="post" action="?step=4">
                    <tr> 
                      <td> 
                        <div align="right">密 碼：</div>
                      </td>
                      <td> 
                        <input type="password" name="t4" class="input">
						<input type="hidden" name="t6" value="<%=Request.form("t2")%>">
                      </td>
                    </tr>
                    <tr> 
                      <td> 
                        <div align="right">確認(rèn)密碼：</div>
                      </td>
                      <td> 
                        <input type="password" name="t5" class="input">
                      </td>
                    </tr>
                    <tr> 
                      <td>&nbsp; </td>
                      <td>
                        <input type="submit" name="Submit3" value="下一步" class="button">
                      </td>
                    </tr>
<%end if
if Request("step")=4 then

if Request.form("t4")<>Request.form("t5") then
call msgbox_j("兩次輸入的密碼不一致","location.href='src_5.asp';")
end if

set rs=server.createobject("adodb.recordset")
sql="select 用戶名,密碼 from 會(huì)員 where 用戶名='"&Rq("t6")&"'"
rs.open sql,conn,1,3
if not rs.eof then
 rs("密碼")=md5(Request.form("t4"),32)
 rs.update
 rs.close
 call write_userlog(Rq("t6"),"日志","用戶密碼被重置","0","0")
else
Rw "找不到用戶名"
Response.end
end if
%>
                    <tr> 
                      <td colspan="2"><img src="images/!.gif" width="14" height="14" align="absmiddle"> 
                        恭喜：密碼重置成功！請(qǐng)記住新密碼：<%=Request.form("t4")%></td>
                    </tr>
                  </form>
                  <%end if%>
                </table>
                </div>
              </td>
            </tr>
          </table>
      </div>
    </td>
  </tr>
  <tr>
      
    <td width="286" valign="top"> <br>
      </td>
  </tr>
</table>
<%
cleartimeout_user
connclose
%>