Login multiutente

[Sandrik]

Cercherò di essere il più sintetico possibile.
Ho una singola tabella con i seguenti campi:
ID - Username - Offerta

2 pagine :
gestione1.asp

gestione2.asp

Il cliente inserisce id e username e viene inviato alla pagina dove puo' aggiornare la propria offerta.

Se volete provare questi sono i dati: Cliente A: id=1 password=aaaa
Cliente B: id=2 password=bbbb

Tutto funziona correttamente, se inserisco i dati del cliente A aggiorno l'offerta del cliente A
Se inserisco quelli del cliente B aggiorno quelli di quest'ultimo.

Il problema nasce quando digito i dati sbagliati. Viene generato ovviamente un errore.
Vorrei che digitando i dati errati si aprisse per esempio la pagina errore.asp
Non ho grosse conoscenze in asp mi aiuto con Dreamweaver.
Ciao a tutti

[Roby_72]

Serve il codice della pagina gestione2.asp
Conoscendo DW posso solo sperare non sia troppo inutilmente lungo...

Roby

:master:

[Sandrik]

Grazie il codice è qui sotto. I campi che vanno aggiornati sono 6.
Che dici è lungo o poteva andare peggio ?

<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>

<%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME"))
If (Request.QueryString <> "") Then
MM_editAction = MM_editAction & "?" & Server.HTMLEncode(Request.QueryString)
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) = "form1" And CStr(Request("MM_recordId")) <> "") Then

MM_editConnection = MM_cnn_umbriadivino_STRING
MM_editTable = "tab_clienti"
MM_editColumn = "id"
MM_recordId = "" + Request.Form("MM_recordId") + ""
MM_editRedirectUrl = "update_ok.asp"
MM_fieldsStr = "offerta1|value|offerta2|value|offerta3|value|offe rta4|value|offerta5|value|offerta6|value"
MM_columnsStr = "last1|',none,''|last2|',none,''|last3|',none,''|o fferta1|',none,''|offerta2|',none,''|offerta3|',no ne,''"

' create the MM_fields and MM_columns arrays
MM_fields = Split(MM_fieldsStr, "|")
MM_columns = Split(MM_columnsStr, "|")

' set the form values
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
Next

' append the query string to the redirect URL
If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
Else
MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
End If
End If

End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

' create the sql update statement
MM_editQuery = "update " & MM_editTable & " set "
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_formVal = MM_fields(MM_i+1)
MM_typeArray = Split(MM_columns(MM_i+1),",")
MM_delim = MM_typeArray(0)
If (MM_delim = "none") Then MM_delim = ""
MM_altVal = MM_typeArray(1)
If (MM_altVal = "none") Then MM_altVal = ""
MM_emptyVal = MM_typeArray(2)
If (MM_emptyVal = "none") Then MM_emptyVal = ""
If (MM_formVal = "") Then
MM_formVal = MM_emptyVal
Else
If (MM_altVal <> "") Then
MM_formVal = MM_altVal
ElseIf (MM_delim = "'") Then ' escape quotes
MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
Else
MM_formVal = MM_delim + MM_formVal + MM_delim
End If
End If
If (MM_i <> LBound(MM_fields)) Then
MM_editQuery = MM_editQuery & ","
End If
MM_editQuery = MM_editQuery & MM_columns(MM_i) & " = " & MM_formVal
Next
MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId

If (Not MM_abortEdit) Then
' execute the update
Set MM_editCmd = Server.CreateObject("ADODB.Command")
MM_editCmd.ActiveConnection = MM_editConnection
MM_editCmd.CommandText = MM_editQuery
MM_editCmd.Execute
MM_editCmd.ActiveConnection.Close

If (MM_editRedirectUrl <> "") Then
Response.Redirect(MM_editRedirectUrl)
End If
End If

End If
%>
<%
Dim Recordset1__VarId
Recordset1__VarId = "0"
If (Request("id") <> "") Then
Recordset1__VarId = Request("id")
End If
%>
<%
Dim Recordset1__VarPassword
Recordset1__VarPassword = "0"
If (Request("password") <> "") Then
Recordset1__VarPassword = Request("password")
End If
%>
<%
Dim Recordset1
Dim Recordset1_numRows

Set Recordset1 = Server.CreateObject("ADODB.Recordset")
Recordset1.ActiveConnection = MM_cnn_umbriadivino_STRING
Recordset1.Source = "SELECT * FROM tab_clienti WHERE id Like '" + Replace(Recordset1__VarId, "'", "''") + "' AND password Like '" + Replace(Recordset1__VarPassword, "'", "''") + "'"
Recordset1.CursorType = 0
Recordset1.CursorLocation = 2
Recordset1.LockType = 1
Recordset1.Open()

Recordset1_numRows = 0
%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Documento senza titolo</title>
</head>

<body>
<form ACTION="<%=MM_editAction%>" METHOD="POST" name="form1">
<table width="100%" border="0" align="center">
<tr>
<td width="14%"></td>
<td width="86%"></td>
</tr>
<tr>
<td class="testo_SXRossoCopia">Offerta 1 </td>
<td><textarea name="offerta1" cols="100" rows="4" id="offerta1"><%=(Recordset1.Fields.Item("last1"). Value)%></textarea></td>
</tr>
<tr>
<td class="testo_SXRossoCopia">Offerta 2 </td>
<td><textarea name="offerta2" cols="100" rows="4" id="offerta2"><%=(Recordset1.Fields.Item("last2"). Value)%></textarea></td>
</tr>
<tr>
<td class="testo_SXRossoCopia">Offerta 3 </td>
<td><textarea name="offerta3" cols="100" rows="4" id="offerta3"><%=(Recordset1.Fields.Item("last3"). Value)%></textarea></td>
</tr>
<tr>
<td class="testo_SXRossoCopia">Offerta Last 1 </td>
<td><textarea name="offerta4" cols="100" rows="4" id="offerta4"><%=(Recordset1.Fields.Item("offerta1 ").Value)%></textarea></td>
</tr>
<tr>
<td class="testo_SXRossoCopia">Offerta Last 2</td>
<td><textarea name="offerta5" cols="100" rows="4" id="offerta5"><%=(Recordset1.Fields.Item("offerta2 ").Value)%></textarea></td>
</tr>
<tr>
<td class="testo_SXRossoCopia">

Offerta Last 3 </p>


</p></td>
<td><textarea name="offerta6" cols="100" rows="4" id="offerta6"><%=(Recordset1.Fields.Item("offerta3 ").Value)%></textarea></td>
</tr>
<tr>
<td></td>
<td></td>
</tr>
<tr>
<td><input type="submit" name="Submit" value="Aggiorna"></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
</tr>
</table>




<input type="hidden" name="MM_update" value="form1">
<input type="hidden" name="MM_recordId" value="<%= Recordset1.Fields.Item("id").Value %>">
</form>
</body>
</html>
<%
Recordset1.Close()
Set Recordset1 = Nothing
%>

[Sandrik]

Se pensate sia di più facile comprensione invio una pagina soltanto con un paio di campi