<% class clsUSERS 'properties ' LET ' ==================================================================================== '.connection - '.UsersPaging - '.PermissionLevel - '.UserID - '.Language - '.AllowNewUsers - '.DefaultPermission - ' GET ' ==================================================================================== ' UserID ' PermissionLevel ' methods ' ==================================================================================== '.Menu() '.Users() private ScriptName private REFERER private Conn_USER private intUSERID private intUserLang private blAllowNewUsers private strCLIENTLANG private intUSERDEFAULTPERMISSION private bRF1, bRF2, bRF3, bRF4, bRF5, bRF6, bRF7, bRF8, bRF9 PRIVATE strSQL Private Sub Class_Initialize() ScriptName = Request.ServerVariables("SCRIPT_NAME") REFERER = Request.ServerVariables("HTTP_REFERER") if REFERER="" then REFERER = ScriptName if intUserPermission="" then intUserPermission="" if intUSERID="" then intUSERID=0 End Sub Private Sub Class_Terminate() End Sub public Property Let Connection(sElemID) set Conn_USER = sElemID End Property public Property Let Paging(sElemID) intUSERSPERPAGE = sElemID End Property public Property Let PermissionLevel(sElemID) intUserPermission = sElemID End Property public Property Get PermissionLevel() PermissionLevel = intUserPermission End Property Public Property Let UserID(sElemID) intUSERID = sElemID End Property Public Property Get UserID() UserID = intUSERID End Property Public Property Let Language(sElemID) intUserLang = sElemID End Property Public Property Let AllowNewUsers(sElemID) blAllowNewUsers = sElemID End Property public Property Let DefaultPermission(sElemID) intUSERDEFAULTPERMISSION = sElemID End Property public Property Let RF1(sElemID) bRF1 = sElemID End Property public Property Let RF2(sElemID) bRF2 = sElemID End Property public Property Let RF3(sElemID) bRF3 = sElemID End Property public Property Let RF4(sElemID) bRF4 = sElemID End Property public Property Let RF5(sElemID) bRF5 = sElemID End Property public Property Let RF6(sElemID) bRF6 = sElemID End Property public Property Let RF7(sElemID) bRF7 = sElemID End Property public Property Let RF8(sElemID) bRF8 = sElemID End Property public Property Let RF9(sElemID) bRF9 = sElemID End Property public function IsLogged() IsLogged = false if session("UserLogged") then IsLogged = true end function ' ------------------------------------------------------------------------------------------------ public function Users() DIM loHTML : loHTML = "" select case UCASE(request("Change")) case "USERADDFORM" loHTML = loHTML & USERADDFORM() ' New user registration case "USERADDEXE" loHTML = loHTML & USERADDEXE() ' Add new user Execution case "USERLIST" loHTML = loHTML & USERLIST() ' Modification of registered users (Admin function) case "USEREDITFORM" loHTML = loHTML & USEREDITFORM() ' Modification of own registered datas or administration of user case "USEREDITEXE" loHTML = loHTML & USEREDITEXE() if intUserPermission="1" then loHTML = loHTML & USERLIST() else response.redirect REFERER ' Modify user Execution end if case "USERDELETE" loHTML = loHTML & USERDELETE():response.redirect REFERER case "USERINFOSEND" loHTML = loHTML & USERINFOSEND() case "USERINFOSENDEXE" loHTML = loHTML & USERINFOSENDEXE() case "LOGINFORM" loHTML = loHTML & LOGINFORM() case "LOGINEXE" loHTML = loHTML & LOGINEXE()':response.redirect "CALENDAR.asp" case "LOGOUTEXE" loHTML = loHTML & LOGOUTEXE()':response.redirect "CALENDAR.asp?Lang="&session("LANG") & "&Client="&session("CLIENT") case "GROUPNEWEXE" loHTML = loHTML & GROUPNEWEXE() loHTML = loHTML & GROUPLIST() case "GROUPUSERADD" loHTML = loHTML & GROUPUSERADD():response.redirect REFERER case "GROUPUSERREMOVE" loHTML = loHTML & GROUPUSERREMOVE():response.redirect REFERER case "GROUPDELETE" loHTML = loHTML & GROUPDELETE() loHTML = loHTML & GROUPLIST() case "GROUPEDITFORM" loHTML = loHTML & GROUPEDITFORM() case "GROUPEDITEXE" loHTML = loHTML & GROUPEDITEXE():response.redirect REFERER case "GROUPNEWFORM" loHTML = loHTML & GROUPNEWFORM() case "GROUPLIST" loHTML = loHTML & GROUPLIST() end select Users = loHTML End Function ' ------------------------------------------------------------------------------------------------ public function Menu() ' This function shows functions for adinistation ' blALLOWNEWUSER to display link for new users ' blALLOWSUBSCRIBERS to display link for subscribers DIM loHTML : loHTML = "" dim strHEADER dim strFOOTER ' if we use build-in users system strBODY = strBODY & "" & VbCrLf strHEADER = strHEADER & application(intUserLang & "_wcal81b") ' BEGIN links for users if intUSERPERMISSION=0 then ' Login link strBODY = strBODY & "" & VbCrLf ' new user link if blAllowNewUsers then strBODY = strBODY & "" & VbCrLf end if else ' edit user link strBODY = strBODY & "" & VbCrLf ' logout strBODY = strBODY & "" & VbCrLf end if if intUSERPERMISSION="1" then ' new user link strBODY = strBODY & "" & VbCrLf ' users management strBODY = strBODY & "" & VbCrLf ' This was commented due to bad functionality strBODY = strBODY & "" & VbCrLf end if ' END links for users strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_wcal84") & "" & " " & VbCrLf ' strBODY = strBODY & " "& application(intUserLang & "_wcal84") & "" & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_wcal85") & "" & " " & VbCrLf ' strBODY = strBODY & " "& application(intUserLang & "_wcal85") & "" & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_wcal82") & "" & " " & VbCrLf ' strBODY = strBODY & " "& application(intUserLang & "_wcal82") & "" & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_wcal83") & "" & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_wcal85") & "" & " " & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_User28") & "" & " " & VbCrLf ' strBODY = strBODY & " "& application(intUserLang & "_User28") & "" & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_User28a") & "" & " " & VbCrLf strBODY = strBODY & "
" & VbCrLf Menu = strBODY ' Menu = funcs.BOXCreator(strHEADER, strBODY, strDEFTHEME, "", "100%") End function ' ------------------------------------------------------------------------------------------------ public function LOGINFORM() DIM loHTML : loHTML = "" dim strHEADER dim strBODY strHEADER = strHEADER & application(intUserLang & "_User35") strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf ' strBODY = strBODY & " " & VbCrLf ' strBODY = strBODY & " " & VbCrLf ' strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "
" & application(intUserLang & "_User9") strBODY = strBODY & "
" & application(intUserLang & "_User10") strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "

" & application(intUserLang & "_User37") strBODY = strBODY & " " & application(intUserLang & "_User38") & "
Use admin/admin for administation of system or create your own account using New user link in left column" ' strBODY = strBODY & "
" & VbCrLf LOGINFORM = funcs.BOXCreator(strHEADER, strBODY, strDEFTHEME, "", 400) end function ' ------------------------------------------------------------------------------------------------ private function LOGINEXE() DIM dtLogin DIM loHTML : loHTML = "" set dtLogin = Conn_USER.Execute ("SELECT * From wcal_users where (UserName='" & request("LoginName") & "' AND UserPassword= '" & request("LoginPassword") & "')") if dtLogin.Eof OR dtLogin.Bof then LOGINEXE = application(session("LANG") & "_LOG_FAILED") ' LOGINEXE = "" else session("WCAL_USERID") = dtLogin("IDUser") session("NewsJmeno") = dtLogin("Name") session("NewsPrijmeni") = dtLogin("Surname") session("NewsCompany") = dtLogin("Company") session("NewsUserName") = dtLogin("UserName") session("NewsHeslo") = dtLogin("UserPassword") session("NewsEmail") = dtLogin("Email") session("NewsStreet") = dtLogin("Street") session("NewsCity") = dtLogin("City") session("NewsPost") = dtLogin("Post") session("WCAL_PERMISSIONLEVEL") = dtLogin("Wcal_Permission") session("UserClient") = dtLogin("Client") ' LOGINEXE = "" response.redirect "CALENDAR.ASP" end if set dtLogin=Nothing end function ' ------------------------------------------------------------------------------------------------ public function LOGOUTEXE() DIM Client DIM Lang Client = session("Client") Lang = intUserLang intUSERID = "" session("NewsJmeno") = "" session("NewsPrijmeni") = "" session("NewsUserName") = "" session("NewsHeslo") = "" session("NewsEmail") = "" intUserPermission = 0 session("NewsArtMSACCESS") = "" session("CatsRead") = "" session("CatsWrite") = "" session.Abandon session("Client") = Client intUserLang = Lang session("LANG") = Lang session("LoadDef") = 0 ' LOGOUTEXE = "

You have been logged out!

" LOGOUTEXE = "" end function ' ------------------------------------------------------------------------------------------------ private Function USERADDFORM() DIM loHTML : loHTML = "" dim strHEADER dim strBODY if request("Agreement")=1 then loHTML = loHTML & "" & VbCrLf strHEADER = strHEADER & application(intUserLang & "_User23") strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "
" & application(intUserLang & "_User1a") strBODY = strBODY & "" if bRF1=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User2") strBODY = strBODY & "" if bRF2=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User3") strBODY = strBODY & "" if bRF3=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User4") strBODY = strBODY & "" if bRF4=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User5") strBODY = strBODY & "" if bRF5=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User6") strBODY = strBODY & "" if bRF6=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User7") strBODY = strBODY & "" if bRF7=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User8") strBODY = strBODY & "" if bRF8=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User8a") strBODY = strBODY & "" if bRF9=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User9") strBODY = strBODY & "*
" & application(intUserLang & "_User10") strBODY = strBODY & "*
" & application(intUserLang & "_User11") strBODY = strBODY & "*
" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "
" & VbCrLf strBODY = strBODY & "" & VbCrLf else strHEADER = strHEADER & application(intUserLang & "_WCal98") & VbCrLf strBODY = strBODY & "

" strBODY = strBODY & "

" & VbCrLf strBODY = strBODY & " " & application(intUserLang & "_WCal99") & VbCrLf strBODY = strBODY & "

" strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & "

" & VbCrLf end if ' USERADDFORM = loHTML & funcs.BOXCreator(strHEADER, strBODY, "XP", "XPHL;XPH;XPHR", 400) USERADDFORM = loHTML & funcs.BOXCreator(strHEADER, strBODY, strDEFTHEME, "", "400") End Function ' ------------------------------------------------------------------------------------------------ private function USERADDEXE() DIM UserTEST set UserTEST = Conn_USER.Execute ("SELECT IDUser From wcal_users where UserName = '" & request.form("NewUserName") & "'") if UserTEST.Eof OR UserTEST.Bof then strSql = "INSERT INTO wcal_users (wcal_permission, Name,Company,Surname,Email,Phone,Street,City,Post, Country, UserName, UserPassword, Client) Values (" &_ "'" & request.form("newspermission") & "', " &_ "'" & funcs.SQLEncode(request.form("Name")) & "', " &_ "'" & funcs.SQLEncode(request.form("Company")) & "', " &_ "'" & funcs.SQLEncode(request.form("Surname")) & "', " &_ "'" & request.form("Email") & "', " &_ "'" & request.form("Phone") & "', " &_ "'" & funcs.SQLEncode(request.form("Street")) & "', " &_ "'" & funcs.SQLEncode(request.form("City")) & "', " &_ "'" & funcs.SQLEncode(request.form("Country")) & "', " &_ "'" & request.form("Post") & "', " &_ "'" & request.form("NewUserName") & "', " &_ "'" & request.form("UserPassword") & "', " &_ "" & session("Client") & ") " strSQl = funcs.TrueFalse(StrSQL, session("strTRUE")) Conn_USER.Execute (StrSql) USERADDEXE = application(intUserLang & "_User25") & "
" &_ request.form("NewUserName") & "/" & request.form("UserPassword") else USERADDEXE = "

" & application(intUserLang & "_User26") & "

" end if set UserTEST = nothing end function ' ------------------------------------------------------------------------------------------------ private Function USEREDITFORM() DIM loHTML : loHTML = "" DIM strHEADER dim strBody strHEADER = strHEADER & application(intUserLang & "_User27") If intUserPermission="1" OR clng(request("NewsIDUser"))=clng(intUSERID) then set dtUser = Conn_USER.Execute ("SELECT * From wcal_users where IDUser=" & request("NewsIDUser")) strBODY=strBODY&" " & VbCrLf strBODY=strBODY&"
" & VbCrLf if intUserPermission="1" then loHTML = loHTML & " " & VbCrLf end if loHTML = loHTML & " " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf if intUserPermission="1" then strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf end if strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf if intUserPermission="1" then strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&" " & VbCrLf end if strBODY=strBODY&"
" & application(intUserLang & "_User1a") strBODY=strBODY&"" if bRF1=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User2") strBODY=strBODY&"" if bRF2=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User3") strBODY=strBODY&"" if bRF3=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User4") strBODY=strBODY&"" if bRF4=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User5") strBODY=strBODY&"" if bRF5=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User6") strBODY=strBODY&"" if bRF6=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User7") strBODY=strBODY&"" if bRF7=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User8") strBODY=strBODY&"" if bRF8=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User8a") strBODY = strBODY & "" if bRF9=1 then strBODY = strBODY & "*" strBODY = strBODY & "
" & application(intUserLang & "_User9") strBODY=strBODY&"*
" & application(intUserLang & "_User10") strBODY=strBODY&"*
" & application(intUserLang & "_User11") strBODY=strBODY&"*
" & application(intUserLang & "_User15") strBODY=strBODY&"" & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&"

" & VbCrLf strBODY=strBODY&" " & VbCrLf strBODY=strBODY&"

" & VbCrLf strBODY=strBODY&TableOfGroup() strBODY=strBODY&"
" & VbCrLf set dUser=Nothing else strBODY=strBODY&"Unsufficient permission!" end if ' USEREDITFORM = funcs.BOXCreator(strHEADER, strBODY, "XP", "XPHL;XPH;XPHR", 400) USEREDITFORM = funcs.BOXCreator(strHEADER, strBODY, strDEFTHEME, "", "400") End Function ' ------------------------------------------------------------------------------------------------ private function USEREDITEXE strSql = "UPDATE wcal_users SET " strSql = strSql & "Company='" & funcs.SQLEncode(request.form("Company")) & "', " strSql = strSql & "Name='" & funcs.SQLEncode(request.form("Name")) & "', " strSql = strSql & "Surname='" & funcs.SQLEncode(request.form("Surname")) & "', " strSql = strSql & "Phone='" & request.form("Phone") & "', " strSql = strSql & "Street='" & funcs.SQLEncode(request.form("Street")) & "', " strSql = strSql & "City='" & funcs.SQLEncode(request.form("City")) & "', " strSql = strSql & "Country='" & funcs.SQLEncode(request.form("Country")) & "', " strSql = strSql & "Post='" & request.form("Post") & "', " strSql = strSql & "UserName='" & request.form("UserName") & "', " strSql = strSql & "Email='" & request.form("Email") & "', " if intUserPermission="1" then strSql = strSql & "Wcal_Permission=" & request.form("Wcal_Permission") & ", " strSql = strSql & "UserPassword='" & request.form("UserPassword") & "' " strSql = strSql & " WHERE IDUser=" & request("NewsIDUser") Conn_USER.Execute (StrSql) end function ' ------------------------------------------------------------------------------------------------ private function USERLIST() DIM loHTML : loHTML = "" DIM QuerySTR DIM PageNom dim strHEADER dim strBODY if intUserPermission="1" then QuerySTR = request.querystring() PageNom = request("Page") QuerySTR = replace(QuerySTR,"&Page="&PageNom,"") strSql = "" if request.form("FilterList")<>"" or session("CompanyFilter")<>"" or session("GroupFilter")<>"" then if request.form("FilterList")<>"" and request.form("CompanyFilter")="" then session("CompanyFilter") = "" if request.form("FilterList")<>"" and request.form("GroupFilter")="" then session("GroupFilter") = "" if request.form("FilterList")<>"" and request.form("CompanyFilter")<>"" then session("CompanyFilter") = request.form("CompanyFilter") if request.form("FilterList")<>"" and request.form("GroupFilter")<>"" then session("GroupFilter") = request.form("GroupFilter") if session("CompanyFilter")<>"" or session("GroupFilter")<>"" then strSql = strSql & " WHERE " JoinSTR="" if session("CompanyFilter")<>"" and session("GroupFilter")<>"" then JoinSTR=" AND " if session("CompanyFilter")<>"" then strSql = strSql & "wcal_users.Company= '" & session("CompanyFilter") & "'" if session("GroupFilter")<>"" then if session("GroupFilter")="NULL" then strSql = strSql & JoinSTR & "usergroup.Name IS NULL" else strSql = strSql & JoinSTR & "usergroup.Name= '" & session("GroupFilter") & "'" end if end if end if CountStr = replace("SELECT count(wcal_users.IDUser) as CountRec from wcal_users left join useringroup on wcal_users.IDUser=useringroup.IDUser left join usergroup on usergroup.IDUserGroup=useringroup.IDGroup " & strsql,"HAVING","WHERE") strSql = " SELECT wcal_users.IDUSer, wcal_users.Email, wcal_users.Surname, wcal_users.Company, " strSql = strSql & "wcal_users.Name AS Jmeno " strSql = strSql & " FROM wcal_users " strSql = strSql & " ORDER BY wcal_users.Company, wcal_users.Surname, wcal_users.Name " 'open recordset and create set AdminSql = Server.CreateObject("ADODB.Recordset") AdminSql.CursorLocation = 3 AdminSql.Open strSql, my_conn DIM Navigation Navigation = funcs.Paging(intUSERSPERPAGE, AdminSql, CountRec, "") strHEADER = application(intUserLang & "_User28") strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & "" & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf ' strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf HowMany = 0 if Not (AdminSql.BOF or AdminSql.EOF) then do Until AdminSql.Eof or HowMany = intUSERSPERPAGE HowMany = HowMany + 1 strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf ' strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " " & VbCrLf AdminSql.MoveNext loop end if strBODY = strBODY & "
Page: " & Navigation strBODY = strBODY & "
" & application(intUserLang & "_User31") strBODY = strBODY & "" & application(intUserLang & "_User1a") strBODY = strBODY & "" & application(intUserLang & "_User4") ' strBODY = strBODY & "" & application(intUserLang & "_Common1") strBODY = strBODY & "
" & AdminSql("Jmeno") & " " & VbCrLf strBODY = strBODY & " " & AdminSql("Surname") strBODY = strBODY & " " & AdminSql("Company") strBODY = strBODY & " " & AdminSql("Jmeno") & " " & AdminSql("Surname") ' strBODY = strBODY & " " & VbCrLf strBODY = strBODY & " Edit" & VbCrLf strBODY = strBODY & " Delete" & VbCrLf strBODY = strBODY & "
" & VbCrLf AdminSql.Close set AdminSql = Nothing else strBODY = strBODY & "Unsufficient permission!" end if ' funcs.BOXCreator(strHEADER, strBODY, "XP", "XPHL;XPH;XPHR", 400) USERLIST = funcs.BOXCreator(strHEADER, strBODY, strDEFTHEME, "", "95%") end function ' ------------------------------------------------------------------------------------------------ private function USERDELETE DIM DELETEvents if intUserPermission="1" then ' Conn_USER.Execute ("delete from wcal_users where IDUser=" & request("NewsIDUser")) Conn_USER.Execute ("delete from wcal_users where IDUser=" & request("NewsIDUser")) ' delete all events of this user strSQL = "SELECT IDEvent from wcal_events where IDUser=" & request("NewsIDUser") set DELETEvents = Conn_USER.execute(strSQL) do until DELETEvents.EOF Conn_USER.execute("DELETE from wcal_eventrec where IDEvent=" & DELETEvents("IDEvent")) Conn_USER.execute("DELETE from wcal_eventcat where IDEvent=" & DELETEvents("IDEvent")) DELETEvents.MoveNext Loop set DELETEvents = nothing else USERDELETE = "Unsufficient permission!" end if end function ' ------------------------------------------------------------------------------------------------ private Function USERINFOSEND() DIM loHTML : loHTML = "" loHTML = "" loHTML = loHTML & "" loHTML = loHTML & "" loHTML = loHTML & "" loHTML = loHTML & "" loHTML = loHTML & "
Email
" & application(intUserLang & "_User59") & "
" ' USERINFOSEND = funcs.BOXCreator(application(intUserLang & "_User58"), loHTML, "XP", "XPHL;XPH;XPHR", 400) USERINFOSEND = funcs.BOXCreator(application(intUserLang & "_User58"), loHTML, strDEFTHEME, "", "400") End Function ' ------------------------------------------------------------------------------------------------ private Function USERINFOSENDEXE() Set UserCheck = Conn_USER.execute("Select * from wcal_users where Email ='" & request("Email") & "'") USERINFOSENDEXE = "

" & application(intUserLang & "_User60") & "

" if NOT (UserCheck.BOF or UserCheck.EOF) then ' Edit this for your own if MAILOBJ.HTMLFormat then ' ============================================================ Message = application(intUserLang & "_User57") & "
" Message = Message & application(intUserLang & "_User9") & ":" & UserCheck("UserName") & "
" & vbcrlf Message = Message & application(intUserLang & "_User10") & ":" & UserCheck("UserPassword") & "
" & vbcrlf Message = Message & "Login" & vbcrlf else Message = application(intUserLang & "_User57") & vbcrlf Message = Message & application(intUserLang & "_User9") & ":" & UserCheck("UserName") & vbcrlf Message = Message & application(intUserLang & "_User10") & ":" & UserCheck("UserPassword") & vbcrlf Message = Message & "Login here: " & ServerAddress & "?Client=" & session("Client") & "&Lang=" & Session("LANG") & "&DoAction=User&Change=LoginForm" & vbcrlf end if ' ============================================================ if IsObject(MAILOBJ) then ' MAILOBJ.Sender = strDefaultEmail MAILOBJ.Recepient = request("Email") MAILOBJ.Subject = application(intUserLang & "_User55") MAILOBJ.Message = Message MAILOBJ.Send() end if end if Set UserCheck = Nothing End Function ' ------------------------------------------------------------------------------------------------ private function TableOfGroup() DIM loHTML: loHTML="" StrSQL = "SELECT * from useringroup where IDUser="& request("NewsIDUser") set UserGroup = Conn_USER.execute(StrSQL) loHTML= loHTML & "" loHTML= loHTML & "" if NOT (UserGroup.BOF or UserGroup.EOF) then loHTML= loHTML & "" do Until UserGroup.EOF set Group = Conn_USER.execute("SELECT * from usergroup where IDUserGroup = " & UserGroup("IDGroup")) loHTML= loHTML & "" loHTML= loHTML & "" loHTML= loHTML & "" UserGroup.MoveNext set Group = Nothing Loop end if loHTML= loHTML & "" & vbcrlf loHTML= loHTML & "
" if intUserPermission="1" then loHTML= loHTML & "" end if loHTML= loHTML & "
"& application(intUserLang & "_User41") & ""& application(intUserLang & "_User42") & "
" & Group("Name") & " " & Group("Description") & " "& application(intUserLang & "_User43") & "
" DIM strGROUPHTML set Groups = Conn_USER.execute("SELECT IDUserGroup, Name from usergroup where Client=" & session("CLIENT") & " order by Name") strGROUPHTML = "
" & vbcrlf strGROUPHTML= strGROUPHTML & "" & vbcrlf set Groups = Nothing loHTML= loHTML & strGROUPHTML loHTML= loHTML & "
" set UserGroup = Nothing session("UserBack") = "DoAction=User&Change=EditSelected&NewsIDUser=" & request("NewsIDUser") TableOfGroup = funcs.BOXCreator(application(intUserLang & "_User39"), loHTML, strDEFTHEME, "", "400") end function ' ------------------------------------------------------------------------------------------------ private function GROUPLIST() DIM loHTML: loHTML="" DIM Groups if intUserPermission=1 then ' Tabulka se skupinami uživatelu set Groups = Conn_USER.execute("SELECT * from usergroup where Client=" & session("CLIENT") & " order by Name") loHTML= loHTML & " " if NOT (Groups.BOF OR Groups.EOF) then do until Groups.EOF loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " Groups.MoveNext Loop end if loHTML= loHTML & " " loHTML= loHTML & "
" & Groups("IDUserGroup") & "" & groups("Name") & "" & Groups("Description") &"EditDelete" & Conn_USER.execute("SELECT count(IDUser) as CIU from useringroup where IDGroup="& Groups("IDUserGroup"))("CIU") & "
" set Groups = Nothing else loHTML= loHTML & "Unsufficient permission!" end if GROUPLIST = funcs.BOXCreator("USER GROUPS LIST", loHTML, strDEFTHEME, "", "95%") end function ' ------------------------------------------------------------------------------------------------ private function GROUPNEWFORM() DIM loHTML: loHTML="" if NOT (intUserPermission="1") then loHTML= loHTML & "

Unsufitient permission!

" else loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & "
" loHTML= loHTML & application(intUserLang & "_User41") loHTML= loHTML & "
" loHTML= loHTML & application(intUserLang & "_User42") loHTML= loHTML & "
" loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & "
" end if GROUPNEWFORM = funcs.BOXCreator(application(intUserLang & "_User48"), loHTML, strDEFTHEME, "", "95%") end function ' ------------------------------------------------------------------------------------------------ private function GROUPNEWEXE() strSQL = "INSERT INTO usergroup (Name, Description, Client) values (" strSQL = strSQL & "'" & request("NewUGroupName") & "', " strSQL = strSQL & "'" & request("NewUGroupDesc") & "'," strSQL = strSQL & "" & session("CLIENT") & ") " my_conn.execute (strSQL) end function ' ------------------------------------------------------------------------------------------------ private function GROUPEDITFORM() DIM loHTML: loHTML="" DIM GroupSET, GUser DIM IDUserInGroup if NOT (intUserPermission="1") then loHTML= loHTML & "

Unsufitient permission!

" else strSQL = "SELECT * from usergroup where IDUserGroup="&request("IDUserGroup") set GroupSET = Server.CreateObject("ADODB.Recordset") GroupSET.CursorLocation = 3 GroupSET.Open strSql, my_conn GroupSET.CacheSize = 100 ' Header loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & "" & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & "
" & application(intUserLang & "_User41") & "
" & application(intUserLang & "_User42") & "
GROUP READ ACCESS
" & VbCrLf loHTML= loHTML & CATEGORY_SELECT(0, "", GroupSET("IDCAT_READ"), "READ") loHTML= loHTML & "
Note: By default permited categoriesfor reading are pre-checked always." & VbCrLf loHTML= loHTML & "
GROUP WRITE ACCESS
" & VbCrLf loHTML= loHTML & CATEGORY_SELECT(0, "", GroupSET("IDCAT_WRITE"), "WRITE") loHTML= loHTML & "
Note: You have to specify each category that user that belongs into this group can write into" & VbCrLf loHTML= loHTML & "
" & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & " " & VbCrLf loHTML= loHTML & "
" & VbCrLf loHTML= loHTML & UserInGroup(request("IDUserGroup")) loHTML= loHTML & "" & VbCrLf GroupSET.close set GroupSET=nothing end if GROUPEDITFORM = funcs.BOXCreator(application(intUserLang & "_User52"), loHTML, strDEFTHEME, "", "95%") end function ' ------------------------------------------------------------------------------------------------ public Function GROUP_ACCESS() session("GROUP_ACCESS_READ") = "0," session("GROUP_ACCESS_WRITE") = "0," if session("WCAL_USERID")<>0 then strSQL="SELECT usergroup.IDCAT_READ, usergroup.IDCAT_WRITE, useringroup.IDUser FROM useringroup INNER JOIN usergroup ON useringroup.IDGroup = usergroup.IDUserGroup where useringroup.IDUser=" & session("WCAL_USERID") set GroupSET = Server.CreateObject("ADODB.Recordset") GroupSET.CursorLocation = 3 GroupSET.Open strSql, my_conn GroupSET.CacheSize = 100 do until GroupSET.EOF session("GROUP_ACCESS_READ") = session("GROUP_ACCESS_READ") & GroupSET("IDCAT_READ") & "," session("GROUP_ACCESS_WRITE") = session("GROUP_ACCESS_WRITE") & GroupSET("IDCAT_WRITE") & "," GroupSET.MoveNext Loop GroupSET.close set GroupSET=nothing end if end function ' ------------------------------------------------------------------------------------------------ public Function CATEGORY_SELECT(ParentID, strPREFIX, IDSelected, strTYPE) dim sH : sH = "" dim strSELECTED dim CatList strSQL = "SELECT IDCat, Name, blRESTRICTED from wcal_category where Lang="& session("LANG") & " and client=" & session("CLIENT") & " AND ParentID=" & ParentID & " order by name ASC" set CatList = Server.CreateObject("ADODB.Recordset") CatList.CursorLocation = 3 CatList.Open strSql, my_conn CatList.CacheSize = 100 do until CatList.EOF strSELECTED="" if strTYPE="READ" then if InStr(1, IDSELECTED&",", CatList("IDCat")&",")>0 or (NOT CatList("blRESTRICTED")) then strSELECTED=" CHECKED " else if InStr(1, IDSELECTED&",", CatList("IDCat")&",")>0 then strSELECTED=" CHECKED " end if sH = sH & "" & strPREFIX & CatList("Name") & "
" & VbCrLf ' BEGIN: We will check sublevels strSQL="SELECT IDCat from wcal_CATEGORY where ParentID=" & CatList("IDCat") dim CATSETTEST, CATTEST CATTEST=FALSE set CATSETTEST=My_conn.execute(strSQL) set CATSETTEST = Server.CreateObject("ADODB.Recordset") CATSETTEST.CursorLocation = 3 CATSETTEST.Open strSql, my_conn CATSETTEST.CacheSize = 100 if NOT(CATSETTEST.BOF or CATSETTEST.EOF) then CATTEST=TRUE CATSETTEST.Close set CATSETTEST=nothing if CATTEST then sH = sH & CATEGORY_SELECT(CatList("IDCat"), strPREFIX & CatList("Name") & "-", IDSelected, strTYPE) end if ' END: We will check sublevels CatList.MoveNext Loop CatList.Close set CatList = nothing CATEGORY_SELECT = sH End Function ' ------------------------------------------------------------------------------------------------ private function UserInGroup(IDGroup) DIM loHTML: loHTML = "" dim GUser strSQL = "SELECT useringroup.IDUserInGroup, useringroup.IDUser as IDU, * from wcal_users left join useringroup on useringroup.IDUser= wcal_users.IDUser where IDGroup = " & request("IDUserGroup") set GUser = Conn_USER.execute(strSQL) if not (GUser.BOF OR GUser.EOF) then loHTML= loHTML & "" do until GUser.EOF loHTML= loHTML & "" loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & "" GUser.MoveNext Loop loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & " " loHTML= loHTML & "
" & GUSer("Name") & " " & GUser("Surname") & "" & GUSer("Company") & ""&application(intUserLang & "_Common2")&""&application(intUserLang & "_User43")&"
" loHTML= loHTML & " " loHTML= loHTML & "
" end if UserInGroup = funcs.BOXCreator(application(intUserLang & "_User54"), loHTML, strDEFTHEME, "", "100%") end function public function GROUPEDITEXE strSQL = "UPDATE usergroup SET " strSQL = strSQL & "Name='" & request("NewUGroupName") & "', " strSQL = strSQL & "IDCat_READ='" & request("IDCat_READ") & "', " strSQL = strSQL & "IDCat_WRITE='" & request("IDCat_WRITE") & "', " strSQL = strSQL & "Description='" & request("NewUGroupDesc") & "' " strSQL = strSQL & "where IDUserGroup=" & request("IDUserGroup") strSQL = funcs.TrueFalse(strsql, session("strTRUE")) Conn_USER.execute (strSQL) end function ' ------------------------------------------------------------------------------------------------ private function GROUPDELETE Conn_USER.execute("delete from useringroup where IDGroup=" & request("IDUserGroup")) Conn_USER.execute("delete from usergroup where IDUserGroup=" & request("IDUserGroup")) ' Calendar specific end function ' ------------------------------------------------------------------------------------------------ private function GROUPUSERADD() DIM Test set Test= Conn_USER.execute("select IDGroup from useringroup where IDUser = " & request("IDUser") & " AND IDGroup= " & request("IDGroup")) if Test.BOF or Test.EOF then Conn_USER.execute("INSERT INTO useringroup (IDUser, IDGroup) values (" & request("IDUser") & "," & request("IDGroup") & ")") end if set Test=Nothing end function ' ------------------------------------------------------------------------------------------------ private function GROUPUSERREMOVE Conn_USER.execute("DELETE from useringroup where IDUserInGroup="&request("IDUserInGroup")) end function end class %>