<%
Response.Expires = -10000 

Server.ScriptTimeOut = 1000 
%>
<!--#include file="inc/conn.asp"-->
<!--#include file="inc/safe.asp"-->
<!--#include file="inc/config.asp"-->
<!--#include file="inc/const.asp"-->
<%
if MemberName="" then
  response.Redirect("userlogin.asp")
  response.end
end if
%>
<% 
  Randomize 
  x = Int((20 * Rnd) + 1) + 10 
  upfilename=Generator(x)  
    
Set theForm = Server.CreateObject("ABCUpload4.XForm") 

theForm.Overwrite = True 

theForm.MaxUploadSize = 512000 

theForm.ID = Request.QueryString("ID") 

Set theField = theForm("attach")(1) 

If theField.FileExists Then 
  mapfile=server.MapPath("uppic")&"\"
  theField.Save "uppic/"&upfilename&"."&theField.Filetype 
  
  session("uppicname")=upfilename&"."& theField.Filetype 
End If 

Function Generator(Length) 
    dim i, tempS, v 
    dim c(39) 
    tempS = "" 
    c(1) = "a": c(2) = "b": c(3) = "c": c(4) = "d": c(5) = "e": c(6) = "f": c(7) = "g" 
	c(8) = "h": c(9) = "i": c(10) = "j": c(11) = "k": c(12) = "l": c(13) = "m": c(14) = "n" 
    c(15) = "o": c(16) = "p": c(17) = "q": c(18) = "r": c(19) = "s": c(20) = "t": c(21) = "u" 
    c(22) = "v": c(23) = "w": c(24) = "x": c(25) = "y": c(26) = "z": c(27) = "1": c(28) = "2" 
    c(29) = "3": c(30) = "4": c(31) = "5": c(32) = "6": c(33) = "7": c(34) = "8": c(35) = "9" 
    c(36) = "-": c(37) = "_": c(38) = "@": c(39) = "!" 
    If isNumeric(Length) = False Then 
      Response.Write "A numeric datatype was not submitted to this function." 
      Exit Function 
    End If 
    For i = 1 to Length 
      Randomize 
      v = Int((39 * Rnd) + 1) 
      tempS = tempS & c(v) 
    Next 
    Generator = tempS 
End Function 

if session("uppicname")<>"" then
  conn.execute "insert into tbjiaoyou(userid,pic,dtime,verify) values("& userid &",'"& session("uppicname") &"','"& now() &"',0)"
  session("uppicname")=""
  response.Write "<script language='javascript'>alert('您的特别交友信息已经成功提交！');window.location='mytbjy.asp';</script>"
  response.end
else
    response.Write "<script language='javascript'>alert('信息提交出错，请返回重新添加！');window.location='mytbjy.asp';</script>"
  response.end  
end if
%> 