<!--#include file="conn.asp"-->
<!-- #include file="inc/const.asp" -->
<!--#include file="inc/email.asp"-->
<!--#include file="md5.asp"-->
<%
dim topic,mailbody,sendmsg,SendMail,useremail
dim username,password,repassword
dim answer
stats="密碼遺忘"
call nav()
call head_var(2,0,"","")
if founderr then
	call dvbbs_error()
else
	if request("action")="step1" then
		call step1()
	elseif request("action")="step2" then
		call step2()
	elseif request("action")="step3" then
		call step3()
	else
		call main()
	end if
	if founderr then call dvbbs_error()
end if
call footer()

sub step1()
if request("username")="" then
	Founderr=true
	Errmsg=Errmsg+"<br>"+"<li>請輸入您的用戶名。"
	exit sub
else
	username=replace(request("username"),"'","")
end if
if Forum_Setting(2)>0 then
	set rs=conn.execute("Select Quesion,Answer,Username,Usergroupid from [user] where username='"&username&"'")
else
	set rs=conn.execute("Select Quesion,Answer,Username,Usergroupid from [user] where username='"&username&"' and UserGroupID>3")
end if
if rs.eof and rs.bof then
	Founderr=true
	errmsg=Errmsg+"<br>"+"<li>您輸入的用戶名并不存在，請重新輸入。<li>或者由于該系統不支持郵件發送，而您的等級為版主以上級別，只能通過聯系管理員獲得密碼。"
elseif rs(3) < 4 then
	Founderr=true
	errmsg=Errmsg+"<br>"+"<li>您是管理員或者是版主，只能通過聯系管理員獲得密碼。"
else
	if rs(0)="" or isnull(rs(0)) then
		Founderr=true
		Errmsg=Errmsg+"<br>"+"<li>該用戶沒有填寫密碼問題及答案，只有填寫的用戶方能繼續。"
	else
%>
<form action="lostpass.asp?action=step2" method="post"> 
<table cellpadding=1 cellspacing=1 align=center class=tableborder1>
    <tr>
    <th valign=middle colspan=2 align=center height=25>取回密碼（第二步：回答問題）</th></tr>
    <tr>
    <td valign=middle class=tablebody1><b>問