<%@ Language=VBScript %>
<!--#include virtual="/inc-freehost-function/FreeHostFunctionMain.asp"-->
<%
If session("admau")="" Then
	ef=True
	ec="授权非法，有可能是超时造成的。"
ElseIf Request("username")="" or RegExpTest("[^A-Za-z0-9]",Request("username")) or len(Request("username"))<3 Then
	ef=True
	ec="会员名没有写/或会员名中有非法字符/或会员名长度小于3个字符！"
elseIf session("candeluser")="" Then
	ef=True
	ec="您没有此操作的权限。"
end if
if not ef then
Set conn=Server.CreateObject("ADODB.Connection")
	conn.Open Application("FreeHostDBlink")
	Set ds = Server.CreateObject("ADODB.Recordset")	
		Sql="Select * from FreeHost.FreeHost_USER where username = '"&Request("username")&"'"
		if Instr(1,sql, ";", 1)>0 or Instr(1,sql, "--", 1)>0 then
Response.Write "非法字符！"
Response.End
end if
		ds.Open Sql,conn,1,3
if ds.Eof then
	ef=True
	ec="用户不存在！"
end if
end if

if not ef then
%>
<!--#include virtual="/inc-freehost-function/htmlwrite.asp"--><%=htmlwrite("html8")%>
 　锁定/解锁用户
 <%=htmlwrite("html9")%>
<%If Request("op")=1 then%>
<br><br><br>
用户 <%=ds ("username")%>，锁定成功！

<%
ds("haveblock")=True
else
%>
<br><br><br>
用户 <%=ds ("username")%>，解锁成功！
<%
ds("haveblock")=false
End if
ds.update
ds.Close
set ds=nothing
conn.Close 
set conn=nothing
%>
<%=htmlwrite("html10")%>
<%end if
if ef then
Response.Redirect "e.asp?e="&ec
end if%>
