%@ LANGUAGE="VBSCRIPT" %>
<%Response.Buffer="true"%>
<%
Dim CommandText,ConnecObj,ConnecObj2,M_item_id
Set ConnecObj=Server.CreateObject("ADODB.Connection")
ConnecObj.Open "orientaljewels","plunia","PL765$"
If Session("cont_id")="" then
Session("cont_id")=8
Session("coun_id")=0
Session("stat_id")=0
Session("city_id")=0
End if
Dim M_user_id,M_brd_itm_name,M_desc_text,M_currency,M_price,M_catalogue,M_cate_id,M_date,M_is_offer,M_max_limit
M_item_id = Request.Form("item_id")
M_user_id = Session("user_id")
M_brd_itm_name = Replace(Request.Form("brd_itm_name"),"'","''")
M_desc_text = Replace(Request.Form("desc_text"),"'","''")
M_currency = Replace(Request.Form("currency"),"'","''")
M_price = Replace(Request.Form("price"),"'","''")
M_catelogue = Replace(Request.Form("catelogue"),"'","''")
M_cate_id = Replace(Request.Form("cate_id"),"'","''")
M_date = Replace(Request.Form("date"),"'","''")
M_is_offer = Replace(Request.Form("is_offer"),"'","''")
M_max_limit = Replace(Request.Form("max_limit"),"'","''")
'**************** Input Validation *************************************************************
Dim flag_Rdirect,err_str
err_str=""
CommandText="SELECT * FROM buyerTB WHERE user_id='" & TRIM(M_user_id) & "'"
Set RS_buyer = ConnecObj.Execute (CommandText,RecordsAffected,adCmdText)
CommandText="SELECT * FROM sellerTB WHERE user_id='" & TRIM(M_user_id) & "'"
Set RS_seller = ConnecObj.Execute (CommandText,RecordsAffected,adCmdText)
If (LEN(TRIM(M_brd_itm_name))=0 ) then
err_str = err_str + "
You have not specified the brand or item name.
"
flag_RDirect = "true"
End if
If (LEN(TRIM(M_desc_text))=0 ) then
err_str = err_str + "
You have not specified the brand or item description.
"
flag_RDirect = "true"
End if
If (LEN(TRIM(M_price))=0 ) then
err_str = err_str + "
You have not entered the price of item.
"
flag_RDirect = "true"
End if
If (LEN(TRIM(M_max_limit))=0 ) then
err_str = err_str + "
You have not specified the max limit.
"
flag_RDirect = "true"
End if
If (InStr(M_date,"/")=0 ) then
err_str = err_str + "
Date is not in specified standard(MM/DD/YYYY).
"
flag_RDirect = "true"
Else
ON ERROR RESUME NEXT
M_off_date=FormatDateTime(cDATE(M_off_date),2)
If (M_off_date="") then
M_off_date=Date()
End if
fakeObj.Blah
End if
'**********************************************************************************************
%>
Action4bid.com - The most easiest and innovative way of business
ORIENTAL JEWELS INC.
301 EAST 47th
Street #14A NEW YORK, N.Y.-10017
TELEPHONE
: 212-486-0423 FAX: 212-759-4434
<%If (RS_seller.EOF) then%>
Action4bid - User Login
Invalid access - Please use login box to access your INBOX. Request through entering proper user ID and password is allowed ONLY.
<%
Else
%>
<%
If (flag_RDirect="true") then
Response.write "You have made few mistakes like : (Please correct)
"
Response.write "
"
Response.write err_str
Response.write "
"
%>
Go Back and correct registration form and resubmit it.
<%
Else
CommandText = "UPDATE storeTB SET user_id='" & M_user_id & "',brd_itm_name='" & M_brd_itm_name & "',desc_text='" & M_desc_text & "',currency='" & M_currency & "',price=" & M_price & ",catalogue='" & M_catalogue & "',cate_id=" & M_cate_id & ",date='" & M_date & "',is_offer=" & M_is_offer & ",max_limit=" & M_max_limit & " where item_id=" & M_item_id
Response.write CommandText
Set RS_itm = ConnecObj.Execute (CommandText,RecordsAffected,adCmdText)
If (RecordsAffected<1) then
Response.write "Due to Unknown problem Action4bid unable to enter the item in your store ... Please contact us to remove the problem."
Else
Response.ReDirect "editstore.asp"
End if
%>