<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="Connections/conn_news.asp" -->
<!--#include file="yns_config.asp" -->
<!--#include file="yns_chklogin.asp" -->
<% chk_user_login(3) %>
<!--#include file="md5.asp" -->
<%

if(request.form("u_name") <> "") then Command1__mmname = request.form("u_name")

if(request.form("u_level") <> "") then Command1__mmlevel = request.form("u_level")

if(request.form("u_password") <> "") then Command1__mmpassword = md5(request.form("u_password"))

%>
<%
Dim rsu__MMColParam
rsu__MMColParam = "1"
If (Request.Form("u_name") <> "") Then
  rsu__MMColParam = Request.Form("u_name")
End If
%>
<%
Dim rsu
Dim rsu_numRows

Set rsu = Server.CreateObject("ADODB.Recordset")
rsu.ActiveConnection = MM_conn_news_STRING
rsu.Source = "SELECT * FROM t_user WHERE u_name = '" + Replace(rsu__MMColParam, "'", "''") + "'"
rsu.CursorType = 0
rsu.CursorLocation = 2
rsu.LockType = 1
rsu.Open()

rsu_numRows = 0
%>
<%
If rsu.EOF And rsu.BOF Then

set Command1 = Server.CreateObject("ADODB.Command")
Command1.ActiveConnection = MM_conn_news_STRING
Command1.CommandText = "INSERT INTO t_user (u_name, u_level, u_password)  VALUES ('" + Replace(Command1__mmname, "'", "''") + "','" + Replace(Command1__mmlevel, "'", "''") + "','" + Replace(Command1__mmpassword, "'", "''") + "') "
Command1.CommandType = 1
Command1.CommandTimeout = 0
Command1.Prepared = true
Command1.Execute()

Response.Redirect "yns_user.asp"
else
Response.write"你的用户名已经有人使用了"
End If

%>
<%
rsu.Close()
Set rsu = Nothing
%>