<%@LANGUAGE="VBSCRIPT"%>
<%
'=====================================================
'| |
'| Change Password |
'| |
'=====================================================
%>
<%
Option explicit
' Good idea to set when using redirect
Response.Expires = 0 ' always load the page, dont store
%>
<%
'------------ ACCESS CONTROL ------------------
%>
<%
'------------ Variable Definition -------------
'------------ Constants Declaration -----------
'------------ Variable Init -------------------
'----------------------------------------------
%>
<%
Sub Change_Password ( NNuser_id, SSoldpassword, SSpassword )
Dim rsTemp, Query_String
Query_String = _
"SELECT * FROM users WHERE user_id= "& NNuser_id
Set rsTemp = OraDatabase.DbCreateDynaset( Query_String, cint(0))
If rsTemp.Fields("domain") <> "" Then
' No need for password
Session("AdditionalParams") = "$USERNAME$,"& objAccessControl.UserName
Call Destroy_All_Objects
Response.Redirect("message.asp?msg=202-15")
Else
If EnCrypt( SSoldpassword ) <> rsTemp.Fields("user_password") Then
' Old Password Mismatch
Call Destroy_All_Objects
Response.Redirect("message.asp?msg=401-8")
End If
End If
' All conditions mat. Change password
'update fields
rsTemp.Edit
rsTemp.Fields("user_password").Value = EnCrypt( SSpassword )
rsTemp.Update
rsTemp.Close
Set rsTemp = nothing
End Sub
%>
<%
'--- Process submition ---
If CBool(QStrPar("action")) Then
' All mandatory parameters FOUND
Call Change_Password ( objAccessControl.UserId, Request("FRoldpassword"), Request("FRpassword") )
Call Destroy_All_Objects
Response.Redirect("message.asp?msg=200-7")
End If
%>
Release Manager
Exit
