<!--#include file="usertop.asp"-->
<!--#include file="md5.asp"-->
<!--#include file="foxx.asp"-->
<%dim server_v1,server_v2
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center>你提交的路径有误，禁止从站点外部提交数据!</center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%dim fqys,errc,i
fqys=request.servervariables("query_string") 
dim nothis(18) 
nothis(0)="net user" 
nothis(1)="xp_cmdshell" 
nothis(2)="/add" 
nothis(3)="exec%20master.dbo.xp_cmdshell" 
nothis(4)="net localgroup administrators" 
nothis(5)="select" 
nothis(6)="count" 
nothis(7)="asc" 
nothis(8)="char" 
nothis(9)="mid" 
nothis(10)="'" 
nothis(11)=":" 
nothis(12)="""" 
nothis(13)="insert" 
nothis(14)="delete" 
nothis(15)="drop" 
nothis(16)="truncate" 
nothis(17)="from" 
nothis(18)="%" 
errc=false 
for i= 0 to ubound(nothis) 
if instr(fqys,nothis(i))<>0 then 
errc=true 
end if 
next 
if errc then 
response.write "<script language=""javascript"">" 
response.write "parent.alert('非法操作!禁止攻击站点服务器!');" 
response.write "self.location.href='Index.Asp';" 
response.write "</script>" 
response.end 
end if 
%>
<%
	dim Pwd,username,Pwd2
	UserName=request("UserName")
	Pwd=replace(trim(Request.Form("Pwd")),"'","‘")
	Pwd2=replace(trim(Request.Form("Pwd2")),"'","‘")

	If Pwd="" or Pwd2="" Then
		Response.Write ("<script>alert('友情提示!\n\n请完整填写各项信息!');history.back();</script>")
		Response.end
	End If
dim rs,sql
	set rs=server.createobject("adodb.recordset")
	Sql="select * from [FOX_user] Where UserName='"&UserName&"'"
	rs.open sql,conn,1,3
	If rs.eof Then
		Response.Write ("<script>alert('友情提示!\n\n会员帐号错误或没有该会员帐号!');history.back();</script>")
		Response.end
	else
	rs("password")=md5(Pwd)
	rs.Update
	conn.close
	set conn=nothing
end if
%>
<HTML>
<HEAD>
<TITLE>密码取回第三步 - <%=tilte%> </TITLE>
<META http-equiv=Content-Type content="text/html; charset=GB2312">
<script language="JavaScript">
<!--
function form1_onsubmit() {
if (document.form1.Key.value=="")
	{
	  alert("友情提示!\n\n请完整输入用户名称!")
	  document.form1.Key.focus()
	  return false
	 }
}
// -->
</script>
<script language="JavaScript">
<!--
function form_onsubmit() {
if(document.form.Pwd.value=="")
	{
	  alert("友情提示!\n\n请完整输入会员新密码!")
	  document.form.Pwd.focus()
	  return false
	 }
else if(document.form.Pwd2.value=="")
	{
	  alert("友情提示!\n\n请完整输入验证密码!")
	  document.form.Pwd2.focus()
	  return false
	 }
else if(document.form.Pwd2.value!=document.form.Pwd.value)
	{
	  alert("友情提示!\n\n验证密码和会员密码不一致!")
	  document.form.Pwd.focus()
	  return false
	 }
}
// -->
</script>
</HEAD>
<BODY bgColor=#ffffff leftMargin=0 topMargin=0>
<TABLE cellSpacing=0 cellPadding=0 width=760 align=center border=0>
  <TBODY>
  <TR>
    <TD width=1% height=30 class="tdtop" >&nbsp; 密码取回第四步</TD></TR></TBODY></TABLE>

<TABLE cellSpacing=0 cellPadding=0 width="760" align=center border=0 bgColor=#ffffff>
  <TBODY>
        <TR>
          <TD>
            <div align="center">
            <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0 class="table2" height="146">
              <TBODY>
                            <TR>
                <TD width="5%" height="30"></TD>
                <TD width="90%" height="30" colspan="2"></TD>
                <TD width="5%" height="30"></TD></TR>
                <TR>
                <TD width="5%" height="30"></TD>
                <TD width="20%" height="30" align="right"></td><TD width="70%" height="30" class=INDEX_XMALL><u>友情提示:会员密码已更改,请使用新密码登陆吧!!!</u></TD>
                <TD width="5%" height="30"></TD></TR>
              <TR>
                <TD width="5%" height="86"></TD>
                <TD width="90%" height="86" colspan="2"></TD>
                <TD width="5%" height="86"></TD></TR></TBODY></TABLE></div>
			</TD></TR></TBODY></TABLE>
<%rsuser.close
set rsuser=nothing%><!--#include file="userbottom.asp"--></body></html>