<!--#include file="usertop.asp"-->
<!--#include file="foxx.asp"-->
<%dim server_v1,server_v2
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center>你提交的路径有误，禁止从站点外部提交数据!</center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%dim fqys,errc,i
fqys=request.servervariables("query_string") 
dim nothis(18) 
nothis(0)="net user" 
nothis(1)="xp_cmdshell" 
nothis(2)="/add" 
nothis(3)="exec%20master.dbo.xp_cmdshell" 
nothis(4)="net localgroup administrators" 
nothis(5)="select" 
nothis(6)="count" 
nothis(7)="asc" 
nothis(8)="char" 
nothis(9)="mid" 
nothis(10)="'" 
nothis(11)=":" 
nothis(12)="""" 
nothis(13)="insert" 
nothis(14)="delete" 
nothis(15)="drop" 
nothis(16)="truncate" 
nothis(17)="from" 
nothis(18)="%" 
errc=false 
for i= 0 to ubound(nothis) 
if instr(fqys,nothis(i))<>0 then 
errc=true 
end if 
next 
if errc then 
response.write "<script language=""javascript"">" 
response.write "parent.alert('非法操作!禁止攻击站点服务器!');" 
response.write "self.location.href='Index.Asp';" 
response.write "</script>" 
response.end 
end if 
%>
<%dim UserName
	UserName=replace(trim(Request("bame")),"'","‘")

	if not IsNumeric(request("verifycode")) then
		rs.close
		set rs=nothing
		Response.Write ("<script>alert('友情提示!\n\n登陆验证码必须是数字!');history.back();</script>")
		Response.end
	end if

	if (int(session("GetCode"))<>int(request("verifycode"))) then
		rs.close
		set rs=nothing
		Response.Write ("<script>alert('友情提示!\n\n登陆验证码错误!');history.back();</script>")
		Response.end
	end if

	If UserName="" Then
		Response.Write ("<script>alert('友情提示!\n\n请完整输入用户名称!');history.back();</script>")
		Response.end
	End If

	if Instr(UserName,">")>0 or Instr(UserName,"<")>0 or Instr(UserName,"=")>0 or Instr(UserName,"%")>0 or Instr(UserName,chr(32))>0 or Instr(UserName,"?")>0 or Instr(UserName,"&")>0 or Instr(UserName,";")>0 or Instr(UserName,",")>0 or Instr(UserName,"'")>0 or Instr(UserName,chr(34))>0 or Instr(UserName,chr(9))>0 or Instr(UserName,"")>0 or Instr(UserName,"$")>0 then
		Response.Write ("<script>alert('友情提示!\n\n会员帐号含有非法字符!');history.back();</script>")
		Response.end
	else
		UserName=Trim(UserName)
	end if
dim rs,sql
	Sql="select username from [FOX_user] where username='"&UserName&"'"
	Set Rs=Conn.execute(Sql)
	If rs.eof Then
		Response.Write ("<script>alert('友情提示!\n\n会员帐号错误或已被删除!');history.back();</script>")
		Response.end
	end if
%>
<HTML>
<HEAD>
<TITLE>密码取回第二步 - <%=tilte%> </TITLE>
<META http-equiv=Content-Type content="text/html; charset=GB2312">
<script language="JavaScript">
<!--
function form1_onsubmit() {
if (document.form1.Key.value=="")
	{
	  alert("友情提示!\n\n请完整输入用户名称!")
	  document.form1.Key.focus()
	  return false
	 }
}
// -->
</script>
<script language="JavaScript">
<!--
function form_onsubmit() {
if (document.form.Answer.value=="")
	{
	  alert("友情提示!\n\n请完整输入您的密保资料!")
	  document.form.Answer.focus()
	  return false
	 }
}
// -->
</script>
</HEAD>
<BODY bgColor=#ffffff leftMargin=0 topMargin=0>
<TABLE cellSpacing=0 cellPadding=0 width=760 align=center border=0>
  <TBODY>
  <TR>
    <TD width=1% height=30 class="tdtop" >密码取回第二步</TD></TR></TBODY></TABLE>

<TABLE cellSpacing=0 cellPadding=0 width="760" align=center border=0 bgColor=#ffffff>
  <TBODY>
        <TR>
          <TD>
            <div align="center">
            <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0 class="table2">
              <TBODY>
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="90%" height="30" colspan="2" align="center">
				<font color="#FF0000">您只有三次机会</font></TD>
                <TD width="5%" height="30"></TD></TR>
<%
	Sql="select * from [FOX_User] where UserName='"&UserName&"'"
	Set Rs=Conn.execute(Sql)
%>
            <form name="form" onsubmit="return form_onsubmit()" method="post" action="passbaooo.Asp?UserName=<%=UserName%>">
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="33%" height="30" align="right" class=INDEX_XMALL>
				忘密用户：</td><TD width="57%" height="30"><%Response.Write(rs(1))%></TD>
                <TD width="5%" height="30"></TD></TR>
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="33%" height="30" align="right" class=INDEX_XMALL>密保资料：</td>
				<TD width="57%" height="30">
				<INPUT maxLength=50 size=26 name=Answer> *</TD>
                <TD width="5%" height="30"></TD></TR>
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="33%" height="30"></td><TD width="57%" height="30"><INPUT type=submit name="SUBMIT" value=" 第三步 "></TD>
                <TD width="5%" height="30"></TD></TR></form>
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="90%" height="10" colspan="2"></TD>
                <TD width="5%" height="30"></TD></TR></TBODY></TABLE></div>
			</TD></TR></TBODY></TABLE>
<%rsuser.close
set rsuser=nothing%><!--#include file="userbottom.asp"--></body></html>