<!--#include file="usertop.asp"-->
<!--#include file="foxx.asp"-->
<%dim server_v1,server_v2
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(server_v1,8,len(server_v2))<>server_v2 then
response.write "<br><br><center><table border=1 cellpadding=20 bordercolor=black bgcolor=#EEEEEE width=450>"
response.write "<tr><td style=font:9pt Verdana>"
response.write "<center>你提交的路径有误，禁止从站点外部提交数据!</center>"
response.write "</td></tr></table></center>"
response.end
end if
%>
<%dim fqys,errc,i
fqys=request.servervariables("query_string") 
dim nothis(18) 
nothis(0)="net user" 
nothis(1)="xp_cmdshell" 
nothis(2)="/add" 
nothis(3)="exec%20master.dbo.xp_cmdshell" 
nothis(4)="net localgroup administrators" 
nothis(5)="select" 
nothis(6)="count" 
nothis(7)="asc" 
nothis(8)="char" 
nothis(9)="mid" 
nothis(10)="'" 
nothis(11)=":" 
nothis(12)="""" 
nothis(13)="insert" 
nothis(14)="delete" 
nothis(15)="drop" 
nothis(16)="truncate" 
nothis(17)="from" 
nothis(18)="%" 
errc=false 
for i= 0 to ubound(nothis) 
if instr(fqys,nothis(i))<>0 then 
errc=true 
end if 
next 
if errc then 
response.write "<script language=""javascript"">" 
response.write "parent.alert('非法操作!禁止攻击站点服务器!');" 
response.write "self.location.href='Index.Asp';" 
response.write "</script>" 
response.end 
end if 
%>
<%
if session("fox_err")="" then
	session("fox_err")=0
	else
	if session("fox_err")>=3 then '错误次数设置
	response.write " <script LANGUAGE='javascript'>alert('你已经被锁定，你是此用户？建议您联系管理员或者站长！');</script>"
	response.write "<script LANGUAGE='javascript'>self.location.href='Index.Asp';</script>" 
	response.end
	end if
	end if
	
dim username,answer
	username=replace(trim(Request("username")),"'","‘")
	Answer=replace(trim(Request("Answer")),"'","‘")

	If Answer="" Then
		Response.Write ("<script>alert('友情提示!\n\n请完整输入您的密保资料!');history.back();</script>")
		session("fox_err")=session("fox_err")+1
		Response.end
		
	End If

	if Instr(Answer,">")>0 or Instr(Answer,"<")>0 or Instr(Answer,"=")>0 or Instr(Answer,"%")>0 or Instr(Answer,chr(32))>0 or Instr(Answer,"?")>0 or Instr(Answer,"&")>0 or Instr(Answer,";")>0 or Instr(Answer,",")>0 or Instr(Answer,"'")>0 or Instr(Answer,chr(34))>0 or Instr(Answer,chr(9))>0 or Instr(Answer,"")>0 or Instr(Answer,"$")>0 then
		Response.Write ("<script>alert('友情提示!\n\n您的密保资料含有非法字符!');history.back();</script>")
		session("fox_err")=session("fox_err")+1
		Response.end
		
	else
		Answer=trim(Answer)
	end if
	
dim rs,sql
	Sql="select * from [FOX_user] where username='"&UserName&"'"
	Set Rs=Conn.execute(Sql)
	If rs.eof Then
		Response.Write ("<script>alert('友情提示!\n\n会员帐号错误或已被删除!');history.back();</script>")
		session("fox_err")=session("fox_err")+1
		Response.end
		
	end if

	if rs("baohu")<>Answer then
		rs.close
		set rs=nothing
		Response.Write ("<script>alert('友情提示!\n\n会员密保资料错误!');history.back();</script>")
		session("fox_err")=session("fox_err")+1
		Response.end
		
end if
%>
<HTML>
<HEAD>
<TITLE>密码取回第三步 - <%=tilte%> </TITLE>
<META http-equiv=Content-Type content="text/html; charset=GB2312">
<script language="JavaScript">
<!--
function form1_onsubmit() {
if (document.form1.Key.value=="")
	{
	  alert("友情提示!\n\n请完整输入用户名称!")
	  document.form1.Key.focus()
	  return false
	 }
}
// -->
</script>
<script language="JavaScript">
<!--
function form_onsubmit() {
if(document.form.Pwd.value=="")
	{
	  alert("友情提示!\n\n请完整输入会员新密码!")
	  document.form.Pwd.focus()
	  return false
	 }
else if(document.form.Pwd2.value=="")
	{
	  alert("友情提示!\n\n请完整输入验证密码!")
	  document.form.Pwd2.focus()
	  return false
	 }
else if(document.form.Pwd2.value!=document.form.Pwd.value)
	{
	  alert("友情提示!\n\n验证密码和会员密码不一致!")
	  document.form.Pwd.focus()
	  return false
	 }
}
// -->
</script>
</HEAD>
<BODY bgColor=#ffffff leftMargin=0 topMargin=0>
<TABLE cellSpacing=0 cellPadding=0 width=760 align=center border=0>
  <TBODY>
  <TR>
    <TD width=1% height=30 class="tdtop" >密码取回第三步</TD></TR></TBODY></TABLE>

<TABLE cellSpacing=0 cellPadding=0 width="760" align=center border=0 bgColor=#ffffff>
  <TBODY>
        <TR>
          <TD>
            <div align="center">
            <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0 class="table2">
              <TBODY>
                            <TR>
                <TD width="5%" height="30"></TD>
                <TD width="90%" height="30" colspan="2"></TD>
                <TD width="5%" height="30"></TD></TR>
<%
	Sql="select * from [FOX_user] where UserName='"&UserName&"'"
	Set Rs=Conn.execute(Sql)
%>
            <form name="form" onsubmit="return form_onsubmit()" method="post" action="passbaoooo.Asp?UserName=<%=UserName%>">
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="32%" height="30" align="right" class=INDEX_XMALL>会员新密码：</td>
				<TD width="59%" height="30"><INPUT type=password maxLength=18 size=20 name=Pwd> *</TD>
                <TD width="5%" height="30"></TD></TR>
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="32%" height="30" align="right" class=INDEX_XMALL>验证新密码：</td>
				<TD width="59%" height="30"><INPUT type=password maxLength=18 size=20 name=Pwd2> *</TD>
                <TD width="5%" height="30"></TD></TR>
              <TR>
                <TD width="5%" height="30"></TD>
                <TD width="32%" height="30"></td><TD width="59%" height="30"><INPUT type=submit name="SUBMIT" value=" 第四步 "></TD>
                <TD width="5%" height="30"></TD></TR></form>
              <TR>                <TD width="5%" height="30"></TD>
                <TD width="90%" height="10" colspan="2"></TD>
                <TD width="5%" height="30"></TD></TR></TBODY></TABLE></div>
			</TD></TR></TBODY></TABLE>
<%rsuser.close
set rsuser=nothing%><!--#include file="userbottom.asp"--></body></html>