%@LANGUAGE="VBSCRIPT"%> <% ' *** Restrict Access To Page: Grant or deny access to this page MM_authorizedUsers="admin" MM_authFailedURL="error.asp" MM_grantAccess=false If Session("MM_Username") <> "" Then If (false Or CStr(Session("MM_UserAuthorization"))="") Or _ (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then MM_grantAccess = true End If End If If Not MM_grantAccess Then MM_qsChar = "?" If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&" MM_referrer = Request.ServerVariables("URL") if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString() MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer) Response.Redirect(MM_authFailedURL) End If %> <% ' *** Edit Operations: declare variables Dim MM_editAction Dim MM_abortEdit Dim MM_editQuery Dim MM_editCmd Dim MM_editConnection Dim MM_editTable Dim MM_editRedirectUrl Dim MM_editColumn Dim MM_recordId Dim MM_fieldsStr Dim MM_columnsStr Dim MM_fields Dim MM_columns Dim MM_typeArray Dim MM_formVal Dim MM_delim Dim MM_altVal Dim MM_emptyVal Dim MM_i MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME")) If (Request.QueryString <> "") Then MM_editAction = MM_editAction & "?" & Server.HTMLEncode(Request.QueryString) End If ' boolean to abort record edit MM_abortEdit = false ' query string to execute MM_editQuery = "" %> <% ' *** Redirect if username exists MM_flag="MM_insert" If (CStr(Request(MM_flag)) <> "") Then MM_dupKeyRedirect="distr_adderror.asp" MM_rsKeyConnection=MM_distributors_STRING MM_dupKeyUsernameValue = CStr(Request.Form("territory2")) MM_dupKeySQL="SELECT Territory FROM Table_Distr WHERE Territory='" & MM_dupKeyUsernameValue & "'" MM_adodbRecordset="ADODB.Recordset" set MM_rsKey=Server.CreateObject(MM_adodbRecordset) MM_rsKey.ActiveConnection=MM_rsKeyConnection MM_rsKey.Source=MM_dupKeySQL MM_rsKey.CursorType=0 MM_rsKey.CursorLocation=2 MM_rsKey.LockType=3 MM_rsKey.Open If Not MM_rsKey.EOF Or Not MM_rsKey.BOF Then ' the username was found - can not add the requested username MM_qsChar = "?" If (InStr(1,MM_dupKeyRedirect,"?") >= 1) Then MM_qsChar = "&" MM_dupKeyRedirect = MM_dupKeyRedirect & MM_qsChar & "requsername=" & MM_dupKeyUsernameValue Response.Redirect(MM_dupKeyRedirect) End If MM_rsKey.Close End If %> <% ' *** Insert Record: set variables If (CStr(Request("MM_insert")) = "form1") Then MM_editConnection = MM_distributors_STRING MM_editTable = "Table_Distr" MM_editRedirectUrl = "distr_added.asp" MM_fieldsStr = "territory2|value|company2|value|address12|value|address22|value|city2|value|state2|value|zip2|value|country2|value|phone2|value|fax2|value|email2|value|web2|value|mapquest2|value|f_state|value" MM_columnsStr = "Territory|',none,''|Company|',none,''|Address1|',none,''|Address2|',none,''|City|',none,''|State|',none,''|Zip|',none,''|Country|',none,''|Phone|',none,''|Fax|',none,''|Email|',none,''|Web|',none,''|Mapquest_calc|',none,''|F_State|',none,''" ' create the MM_fields and MM_columns arrays MM_fields = Split(MM_fieldsStr, "|") MM_columns = Split(MM_columnsStr, "|") ' set the form values For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i))) Next ' append the query string to the redirect URL If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString Else MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString End If End If End If %> <% ' *** Insert Record: construct a sql insert statement and execute it Dim MM_tableValues Dim MM_dbValues If (CStr(Request("MM_insert")) <> "") Then ' create the sql insert statement MM_tableValues = "" MM_dbValues = "" For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_formVal = MM_fields(MM_i+1) MM_typeArray = Split(MM_columns(MM_i+1),",") MM_delim = MM_typeArray(0) If (MM_delim = "none") Then MM_delim = "" MM_altVal = MM_typeArray(1) If (MM_altVal = "none") Then MM_altVal = "" MM_emptyVal = MM_typeArray(2) If (MM_emptyVal = "none") Then MM_emptyVal = "" If (MM_formVal = "") Then MM_formVal = MM_emptyVal Else If (MM_altVal <> "") Then MM_formVal = MM_altVal ElseIf (MM_delim = "'") Then ' escape quotes MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'" Else MM_formVal = MM_delim + MM_formVal + MM_delim End If End If If (MM_i <> LBound(MM_fields)) Then MM_tableValues = MM_tableValues & "," MM_dbValues = MM_dbValues & "," End If MM_tableValues = MM_tableValues & MM_columns(MM_i) MM_dbValues = MM_dbValues & MM_formVal Next MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")" If (Not MM_abortEdit) Then ' execute the insert Set MM_editCmd = Server.CreateObject("ADODB.Command") MM_editCmd.ActiveConnection = MM_editConnection MM_editCmd.CommandText = MM_editQuery MM_editCmd.Execute MM_editCmd.ActiveConnection.Close If (MM_editRedirectUrl <> "") Then Response.Redirect(MM_editRedirectUrl) End If End If End If %> <% Dim rs_Admin_Users Dim rs_Admin_Users_numRows Set rs_Admin_Users = Server.CreateObject("ADODB.Recordset") rs_Admin_Users.ActiveConnection = MM_db_admin_users_STRING rs_Admin_Users.Source = "SELECT * FROM Table_users ORDER BY FirstName ASC" rs_Admin_Users.CursorType = 0 rs_Admin_Users.CursorLocation = 2 rs_Admin_Users.LockType = 1 rs_Admin_Users.Open() rs_Admin_Users_numRows = 0 %> <% Dim rs_Distributors__MMColParam rs_Distributors__MMColParam = "1" If (Request.QueryString("Territory") <> "") Then rs_Distributors__MMColParam = Request.QueryString("Territory") End If %> <% Dim rs_Distributors Dim rs_Distributors_numRows Set rs_Distributors = Server.CreateObject("ADODB.Recordset") rs_Distributors.ActiveConnection = MM_distributors_STRING rs_Distributors.Source = "SELECT * FROM Table_Distr WHERE Territory = '" + Replace(rs_Distributors__MMColParam, "'", "''") + "' ORDER BY Company ASC" rs_Distributors.CursorType = 0 rs_Distributors.CursorLocation = 2 rs_Distributors.LockType = 1 rs_Distributors.Open() rs_Distributors_numRows = 0 %> <% Dim rs_DistrZipRanges Dim rs_DistrZipRanges_numRows Set rs_DistrZipRanges = Server.CreateObject("ADODB.Recordset") rs_DistrZipRanges.ActiveConnection = MM_distributors_STRING rs_DistrZipRanges.Source = "SELECT * FROM Table_Zips" rs_DistrZipRanges.CursorType = 0 rs_DistrZipRanges.CursorLocation = 2 rs_DistrZipRanges.LockType = 1 rs_DistrZipRanges.Open() rs_DistrZipRanges_numRows = 0 %>

| Site Administration: Add New Distributor |
| Add a
distributor to the the Find-A-Showroom section of the Abex
public web site. |