zablo
Posts: 6 From: texarkana, texas, usa Status: offline
|
RE: User Login - 6/12/2001 20:24:00
ok, the login form posts to login.asp...and we have alredy determined that if bad information is supplied thye are forwared to main.asp?e=01on main.asp '<!--#INCLUDE File="passprotect.inc"-->' is at the very top of the page... the rest of the HTML is as follows: <!--#INCLUDE File="passprotect.inc"--> <html> <head> <meta name="Copyright" content="All designs located on the Zablo website are copyright, (c) Zablo Web Technologies, Inc. Please send e-mail to support@zablo.pldesigns.com for more information about this site."> <meta name="DC.description" content="Zablo Domain Hosting: E-commerce solutions for you! Dedicated Access, Domain Name Registration. We'll help you get your own URL! We'll host your Web site on the Internet! Zablo. Get your own domain name."> <meta name="DC.subject" content="Zablo Domain Hosting: E-commerce solutions for you! Dedicated Access, Domain Name Registration. We'll help you get your own URL! We'll host your Web site on the Internet! Zablo. Get your own domain name."> <meta name="DC.title" content="Zablo Domain Hosting: E-commerce solutions for you! Dedicated Access."> <meta name="description" content="Zablo Domain Hosting: E-commerce solutions for you! Dedicated Access, Domain Name Registration. We'll help you get your own URL! We'll host your Web site on the Internet! Zablo. Get your own domain name."> <meta name="Designer" content="1101"> <meta name="keywords" content="Zablo Domain Hosting E-commerce Dedicated Access Zablo Domain Hosting E-commerce Dedicated Access Zablo's Domains Hostings E-commerces Dedicated Access Zablo's Domains Hostings E-commerces Dedicated Access Verioed Domained Hostinged E-commerced Dedicated Access Verioed Domained Hostinged E-commerced Dedicated Accessed Verioing Domaining Host E-commerceing Dedicated Accessing Verioing Domaining Host E-commerceing Dedicated Accessing Verioer Domainer Hostinger E-commercer Dedicated Access Verioer Domainer Hostinger E-commercer Dedicated Access Verior Domainor Hostingor E-commerceor Dedicated Access Verior Domainor Hostingor E-commerceor Dedicated Access Name Names Registration URL URLs Hosts Names Registration Name URL Internet Address Internet Addresses Web Address Web URLs Hosts Addresses"> <meta name="ProgId" content="FrontPage.Editor.Document"> <meta name="rating" content="General"> <meta name="revisit-after" content="30 days"> <meta name="ROBOTS" content="ALL"> <meta name="VW96.objecttype" content="Zablo Domain Hosting: E-commerce solutions for you! Dedicated Access."> <meta name="webmaster" content="1101"> <meta name="GENERATOR" content="Microsoft FrontPage 4.0"> <title>Zablo: User Login</title> <link rel="stylesheet" type="text/css" href="../style-main.css"> <style type="text/css">span.mono { font-family: monospace } </style> </head> <body bgcolor="#000000" topmargin="0" leftmargin="0"> <center> <table border="0" width="300" cellspacing="0" cellpadding="0" height="148"> <tr> <td valign="top" bgcolor="#000000" height="44"> <!--webbot bot="Include" u-include="../zablo2.html" tag="BODY" --> </td> </tr> <tr> <td valign="top" bgcolor="#FFFFFF" height="104"> <!--webbot bot="DatabaseRegionStart" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-columntypes="202,202,202,202,202,202,202,3,3,3,3,202,202,202,202,202,202,202" s-dataconnection="zablo" b-tableformat="FALSE" b-menuformat="FALSE" s-menuchoice="fn" s-menuvalue="fn" b-tableborder="TRUE" b-tableexpand="TRUE" b-tableheader="TRUE" b-listlabels="FALSE" b-listseparator="FALSE" i-ListFormat="0" b-makeform="FALSE" s-recordsource="login" s-displaycolumns="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-criteria="[username] EQ {username} + [password] EQ {password} |" s-order s-sql="SELECT * FROM login WHERE (username = '::username::' AND password = ': assword::')" b-procedure="FALSE" clientside SuggestedExt="asp" s-DefaultFields="username=&password=" s-NoRecordsFound="Invalid username and/or password, please try again." i-MaxRecords="1" i-GroupSize="0" BOTID="1" u-dblib="../_fpclass/fpdblib.inc" u-dbrgn1="../_fpclass/fpdbrgn1.inc" u-dbrgn2="../_fpclass/fpdbrgn2.inc" tag="BODY" local_preview="<table border=0 width="100%"><tr><td bgcolor="#FFFF00" align="left"><font color="#000000">Database Results regions will not preview unless this page is fetched from a Web server using a web browser. The section of the page from here to the end of the Database Results region will repeat once for each record returned by the query.</font></td></tr></table>" preview="<table border=0 width="100%"><tr><td bgcolor="#FFFF00" align="left"><font color="#000000">This is the start of a Database Results region. The page must be fetched from a web server with a web browser to display correctly; the current web is stored on your local disk or network.</font></td></tr></table>" b-WasTableFormat="FALSE" --><!--#include file="../_fpclass/fpdblib.inc"--> <% fp_sQry="SELECT * FROM login WHERE (username = '::username::' AND password = ': assword::')" fp_sDefault="username=&password=" fp_sNoRecords="Invalid username and/or password, please try again." fp_sDataConn="zablo" fp_iMaxRecords=1 fp_iCommandType=1 fp_iPageSize=0 fp_fTableFormat=False fp_fMenuFormat=False fp_sMenuChoice="fn" fp_sMenuValue="fn" fp_iDisplayCols=18 fp_fCustomQuery=False BOTID=1 fp_iRegion=BOTID %> <!--#include file="../_fpclass/fpdbrgn1.inc"--> <!--#include file="../.inc"--> <!--webbot bot="DatabaseRegionStart" i-CheckSum="20132" endspan --> <table border="0" width="100%" cellspacing="0" cellpadding="0" height="100%"> <tr> <td bgcolor="#EBEBEB" valign="top" width="249" height="256"> <!--webbot bot="Include" u-include="../safe/files/xtra/flash.shtml" tag="BODY" --> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font face="Arial"> <img border="0" src="../images/trans.gif" width="252" height="1"></font></p>
<p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> User Options:</font></p> <blockquote> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"><img border="0" src="../images/button.gif"> <a href="../order/index.asp?username=<%=FP_FieldLink(fp_rs,"username")%>&password=<%=FP_FieldURL(fp_rs,"password")%>">Place A New Order</a></font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"> <img border="0" src="../images/button.gif"><a href="change.asp?username=<%=FP_FieldLink(fp_rs,"username")%>&password=<%=FP_FieldLink(fp_rs,"password")%>"> My Account Info</a> </font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"> <img border="0" src="../images/button.gif"> <a href="login.asp?username=<%=FP_FieldLink(fp_rs,"username")%>&password=<%=FP_FieldLink(fp_rs,"password")%>">Admin Main</a> </font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"> <img border="0" src="../images/button.gif"> <a href="logout.asp?&username=<%=FP_FieldLink(fp_rs,"username")%>">Logout</a> </font></p> </blockquote> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font face="Arial"><font size="1"> </font><font size="2"> Customer Options:</font></font></p> <blockquote> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"> <img border="0" src="../images/button.gif"> <a href="<%=FP_FieldLink(fp_rs,"url")%>">View My Web Site</a> </font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"> <a href="mailto:webdesignchange@zablo.com?Subject=<%=FP_FieldURL(fp_rs,"fn")%>&ln=<%=FP_FieldURL(fp_rs,"ln")%> (<%=FP_FieldURL(fp_rs,"username")%> ) Needs To Make Changes To Their Web Site."> <img border="0" src="../images/button.gif"> Make Changes to Web Site</a></font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"> <img border="0" src="../images/button.gif"> Make Changes to Account</font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="1" face="Arial"><img border="0" src="../images/button.gif"> View All Orders</font></p> </blockquote> </td> <td width="1470" height="456" bgcolor="#FFFFFF" valign="top"> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font face="Arial"> <a href="../index.asp?3">Home</a> <font color="#C0C0C0"> > </font><a href="main.asp">User Login</a> <font color="#C0C0C0"> > </font>Logged In As: </font><span style="text-transform: capitalize"><font size="2" face="Arial"><!--webbot bot="DatabaseResultColumn" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-column="username" b-tableformat="FALSE" b-hasHTML="FALSE" clientside local_preview="<font size="-1"><<</font>username<font size="-1">>></font>" preview="<font size="-1"><<</font>username<font size="-1">>></font>" --><%=FP_FieldVal(fp_rs,"username")%><!--webbot bot="DatabaseResultColumn" i-CheckSum="19455" endspan --> </font> </span></p> <p style="word-spacing: 0; border-bottom: 1 solid #000000; margin-top: 0; margin-bottom: 0" align="right"><i><span style="text-transform: uppercase"><font face="Arial" size="4">WELCOME BACK <!--webbot bot="DatabaseResultColumn" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-column="fn" b-tableformat="FALSE" b-hasHTML="FALSE" clientside local_preview="<font size="-1"><<</font>fn<font size="-1">>></font>" preview="<font size="-1"><<</font>fn<font size="-1">>></font>" --><%=FP_FieldVal(fp_rs,"fn")%><!--webbot bot="DatabaseResultColumn" i-CheckSum="4509" endspan --> <!--webbot bot="DatabaseResultColumn" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-column="ln" b-tableformat="FALSE" b-hasHTML="FALSE" clientside local_preview="<font size="-1"><<</font>ln<font size="-1">>></font>" preview="<font size="-1"><<</font>ln<font size="-1">>></font>" --><%=FP_FieldVal(fp_rs,"ln")%><!--webbot bot="DatabaseResultColumn" i-CheckSum="4893" endspan --> </font> </span></i></p> <blockquote> <p align="justify"><font face="Arial"> Welcome back <b><!--webbot bot="DatabaseResultColumn" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-column="fn" b-tableformat="FALSE" b-hasHTML="FALSE" clientside local_preview="<font size="-1"><<</font>fn<font size="-1">>></font>" preview="<font size="-1"><<</font>fn<font size="-1">>></font>" --><%=FP_FieldVal(fp_rs,"fn")%><!--webbot bot="DatabaseResultColumn" i-CheckSum="4509" endspan --> </b>, to your Member Administration. We have completely redesigned the layout and have added many new options. Please use the links below and to the left to navigate around your section of Zablo.</font></p> <div align="left"> <table border="0" width="234" height="1" cellspacing="0" cellpadding="0"> <tr> <td width="134" height="1" bgcolor="#E6E6E6"> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0" align="left"><font face="Arial" size="1">Your Decrypted Username:</font></td> <td width="84" height="1" bgcolor="#E6E6E6"><font face="Arial" size="1"><!--webbot bot="DatabaseResultColumn" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-column="username" b-tableformat="FALSE" b-hasHTML="FALSE" clientside local_preview="<font size="-1"><<</font>username<font size="-1">>></font>" preview="<font size="-1"><<</font>username<font size="-1">>></font>" --><%=FP_FieldVal(fp_rs,"username")%><!--webbot bot="DatabaseResultColumn" i-CheckSum="19455" endspan --> </font></td> </tr> <tr> <td width="134" height="1" bgcolor="#E6E6E6"><font face="Arial" size="1">Your E-Mail Address:</font></td> <td width="84" height="1" bgcolor="#E6E6E6"><font face="Arial" size="1"><!--webbot bot="DatabaseResultColumn" startspan s-columnnames="fn,ln,address1,address2,city,state,zip,area,phone,areafax,phonefax,email,country,company,username,password,url,allorder" s-column="email" b-tableformat="FALSE" b-hasHTML="FALSE" clientside local_preview="<font size="-1"><<</font>email<font size="-1">>></font>" preview="<font size="-1"><<</font>email<font size="-1">>></font>" --><%=FP_FieldVal(fp_rs,"email")%><!--webbot bot="DatabaseResultColumn" i-CheckSum="10376" endspan --> </font></td> </tr> </table> </div> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"> </p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font face="Arial">User Options:</font></p> <blockquote> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"><img border="0" src="../images/button.gif"> <a href="../order/index.asp?username=<%=FP_FieldLink(fp_rs,"username")%>&password=<%=FP_FieldURL(fp_rs,"password")%>">Place A New Order</a></font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> <img border="0" src="../images/button.gif"><a href="change.asp?username=<%=FP_FieldLink(fp_rs,"username")%>&password=<%=FP_FieldLink(fp_rs,"password")%>"> My Account Info</a> </font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> <img border="0" src="../images/button.gif"> <a href="login.asp?username=<%=FP_FieldLink(fp_rs,"username")%>&password=<%=FP_FieldLink(fp_rs,"password")%>">Admin Main</a></font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> <img border="0" src="../images/button.gif"> <a href="logout.asp?username=<%=FP_FieldLink(fp_rs,"username")%>">Logout</a></font></p> </blockquote> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font face="Arial">Customer Options:</font></p> <blockquote> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> <img border="0" src="../images/button.gif"> <a href="<%=FP_FieldLink(fp_rs,"url")%>">View My Web Site</a></font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> <a href="mailto:webdesignchange@zablo.com?Subject=<%=FP_FieldURL(fp_rs,"fn")%>&ln=<%=FP_FieldURL(fp_rs,"ln")%> (<%=FP_FieldURL(fp_rs,"username")%> ) Needs To Make Changes To Their Web Site."> <img border="0" src="../images/button.gif"> Make Changes to Web Site</a></font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"> <img border="0" src="../images/button.gif"> Make Changes to Account</font></p> <p style="word-spacing: 0; margin-top: 0; margin-bottom: 0"><font size="2" face="Arial"><img border="0" src="../images/button.gif"> View All Orders</font></p> </blockquote> </blockquote> </td> </tr> </table> </td> </tr> </center> </table> <div align="center"> <center> <table border="0" width="300" cellspacing="0" cellpadding="0" height="70"> <tr> <td width="705" height="1" valign="top" bgcolor="#FFFFFF"> <!--webbot bot="DatabaseRegionEnd" startspan b-tableformat="FALSE" b-menuformat="FALSE" u-dbrgn2="../_fpclass/fpdbrgn2.inc" i-groupsize="0" clientside tag="BODY" local_preview="<table border=0 width="100%"><tr><td bgcolor="#FFFF00" align="center"><font color="#000000">End of Database Results region.</font></td></tr></table>" preview="<table border=0 width="100%"><tr><td bgcolor="#FFFF00" align="left"><font color="#000000">This is the end of a Database Results region.</font></td></tr></table>" --><!--#include file="../_fpclass/fpdbrgn2.inc"--> <!--webbot bot="DatabaseRegionEnd" i-CheckSum="56926" endspan --> </td> </tr> <tr> <td width="705" height="76" valign="top" bgcolor="#000000"> <!--webbot bot="Include" u-include="../bottom2.html" tag="BODY" --> </td> </tr> </table> </center> </div> </body> </html> On this page is where the username and paswords are check to the database. WHat is wrong with the coding?
|