<%@LANGUAGE="VBSCRIPT"%> 
<!--#include file="Connections/mygallery.asp" -->

<%
If Request.Form("logout") <> "" THEN
Session("UserID") = ""
Session("Loggedin") = ""
Session("Username") = ""
END IF
%>
<%
Dim rsUsercheck__MM_recordId
rsUsercheck__MM_recordId = "%"
%>
<%
Dim rsUsercheck__MMColParam
rsUsercheck__MMColParam = "%"
If (Request.Form("UserIDdelete")  <> "1") Then 
  rsUsercheck__MMColParam = Request.Form("UserIDdelete") 
  rsUsercheck__MM_recordId = Request.Form("MM_recordId") 
End If
%>
<%
If Request.Form("UserIDdelete") <> "" THEN

Dim rsUsercheck
Dim rsUsercheck_numRows

Set rsUsercheck = Server.CreateObject("ADODB.Recordset")
rsUsercheck.ActiveConnection = MM_mygallery_STRING
rsUsercheck.Source = "SELECT *  FROM Pictures  WHERE (UserID LIKE '" + Replace(rsUsercheck__MMColParam, "'", "''") + "' AND ID LIKE '" + Replace(rsUsercheck__MM_recordId, "'", "''") + "')"
rsUsercheck.CursorType = 0
rsUsercheck.CursorLocation = 2
rsUsercheck.LockType = 1
rsUsercheck.Open()

rsUsercheck_numRows = 0


IF rsUsercheck.EOF THEN
response.write(" Sorry i won't let you do that :-)")
rsUsercheck.Close()
Set rsUsercheck = Nothing

Response.End()
END IF
END IF
%>
<%

Dim Login__MMColParam
Login__MMColParam = "1"
If (Request.Form("Username") <> "") Then 
  Login__MMColParam = Request.Form("Username")
End If
%>
<%
Dim Login__MMPassword
Login__MMPassword = "1"
If (Request.Form("Password") <> "") Then 
  Login__MMPassword = Request.Form("Password")
End If
%>
<%
Dim Login
Dim Login_numRows

Set Login = Server.CreateObject("ADODB.Recordset")
Login.ActiveConnection = MM_mygallery_STRING
IF Session("UserID") <> "" THEN
Login.Source = "SELECT * FROM LoginQuery WHERE UserID = " & Session("UserID") & ""
ELSE

Login.Source = "SELECT *  FROM LoginQuery  WHERE Username = '" + Replace(Login__MMColParam, "'", "''") + "' AND Password ='" + Replace(Login__MMPassword, "'", "''") + "'"
END IF
Login.CursorType = 0
Login.CursorLocation = 2
Login.LockType = 1
Login.Open()

Login_numRows = 0

If NOT Login.EOF THEN
session("loggedin") = "Yes"
session("UserID") = Login.Fields.Item("UserID").Value
Session("Username") = Login.Fields.Item("Username").Value
'Session("UserID") = "1"
END IF
%>

<%
' *** Edit Operations: declare variables

MM_editAction = CStr(Request("URL"))
If (Request.QueryString <> "") Then
  MM_editAction = MM_editAction & "?" & Request.QueryString
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Delete Record: declare variables

if (CStr(Request("MM_delete")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Pictures"
  MM_editColumn = "ID"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = ""

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If
  
End If
%>
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) = "form3" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Users"
  MM_editColumn = "UserID"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = "list.asp"
  MM_fieldsStr  = "Email|value|Password|value|Username|value"
  MM_columnsStr = "Email|',none,''|Password|',none,''|Username|',none,''"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Insert Record: set variables

If (CStr(Request("MM_insert")) = "signup") Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Users"
  MM_editRedirectUrl = "list.asp?Newmem=yes"
  MM_fieldsStr  = "Email|value|username|value|password|value"
  MM_columnsStr = "Email|',none,''|Username|',none,''|Password|',none,''"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Delete Record: construct a sql delete statement and execute it

If (CStr(Request("MM_delete")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql delete statement
  MM_editQuery = "delete from " & MM_editTable & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the delete
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
  ' This is where we delete the file before we delete the record!
      Set File = CreateObject("Scripting.FileSystemObject")
     ImagePath = Server.MapPath("..\..\cgi-bin\mypics")
      ImagePath = ImagePath & "\" & Request.Form("Username")
	ImagePath = ImagePath & "\" & Request.Form("CatID")
     ImagePath = ImagePath & "\" & Request.Form("Image")
	'response.write Imagepath  
If File.FileExists(Imagepath) Then    
	File.DeleteFile(ImagePath)
	ImagePath = Replace(ImagePath,".jpg","_small.jpg")
	'response.write Imagepath 
	File.DeleteFile(ImagePath)
END IF
	set File = Nothing

    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql update statement
  MM_editQuery = "update " & MM_editTable & " set "
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),",")
    MM_delim = MM_typeArray(0)
    If (MM_delim = "none") Then MM_delim = ""
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = "none") Then MM_altVal = ""
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = "none") Then MM_emptyVal = ""
    If (MM_formVal = "") Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal <> "") Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = "'") Then  ' escape quotes
        MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i <> LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery & ","
    End If
    MM_editQuery = MM_editQuery & MM_columns(MM_i) & " = " & MM_formVal
  Next
  MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the update
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
' *** Insert Record: construct a sql insert statement and execute it

Dim MM_tableValues
Dim MM_dbValues

If (CStr(Request("MM_insert")) <> "") Then

  ' create the sql insert statement
  MM_tableValues = ""
  MM_dbValues = ""
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),",")
    MM_delim = MM_typeArray(0)
    If (MM_delim = "none") Then MM_delim = ""
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = "none") Then MM_altVal = ""
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = "none") Then MM_emptyVal = ""
    If (MM_formVal = "") Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal <> "") Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = "'") Then  ' escape quotes
        MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i <> LBound(MM_fields)) Then
      MM_tableValues = MM_tableValues & ","
      MM_dbValues = MM_dbValues & ","
    End If
    MM_tableValues = MM_tableValues & MM_columns(MM_i)
    MM_dbValues = MM_dbValues & MM_formVal
  Next
  MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")"

  If (Not MM_abortEdit) Then
    ' execute the insert
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close



    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
Dim rsPictures__MM_category
rsPictures__MM_category = "%"
If (request("category")  <> "") Then 
  rsPictures__MM_category = request("category") 
End If
%>
<%
Dim rsPictures__MMUserID
IF Session("UserID") <> "1" THEN 

rsPictures__MMUserID = "1"
If (session("UserID") <> "") Then 
  rsPictures__MMUserID = session("UserID")
End If
ELSE

rsPictures__MMUserID = "1"
If (Request("user") <> "") Then 
  rsPictures__MMUserID = Request("user")
End If
END IF
%>
<%
set rsPictures = Server.CreateObject("ADODB.Recordset")
rsPictures.ActiveConnection = MM_mygallery_STRING
rsPictures.Source = "SELECT *  FROM Category INNER JOIN PictureQuery ON Category.CatID = PictureQuery.CatID  WHERE category.category LIKE '" + Replace(rsPictures__MM_category, "'", "''") + "' AND Category.UserID LIKE '" + Replace(rsPictures__MMUserID, "'", "''") + "'  ORDER BY Pictures.CatID DESC, Pictures.ID DESC;"
rsPictures.CursorType = 0
rsPictures.CursorLocation = 2
rsPictures.LockType = 3
rsPictures.Open()
rsPictures_numRows = 0
%>
<%
Dim rsCats__MMUserID
IF Session("UserID") <> "1" THEN 

rsCats__MMUserID = "1"
If (session("UserID") <> "") Then 
  rsCats__MMUserID = session("UserID")
End If
ELSE

rsCats__MMUserID = "%"
If (Request("user") <> "") Then 
  rsCats__MMUserID = Request("user")
END IF
END IF

%>
<%
IF Session("UserID") <> "" THEN

Dim rsCats
Dim rsCats_numRows



Set rsCats = Server.CreateObject("ADODB.Recordset")
rsCats.ActiveConnection = MM_mygallery_STRING
rsCats.Source = "SELECT *  FROM CategoryQuery WHERE UserID LIKE '" + Replace(rsCats__MMUserID, "'", "''") + "'  ORDER BY CatID DESC"
rsCats.CursorType = 0
rsCats.CursorLocation = 2
rsCats.LockType = 1
rsCats.Open()

rsCats_numRows = 0

If  rsCats.EOF Or  rsCats.BOF Then 

rsPictures.Close()
Set rsPictures = Nothing

rsCats.Close()
Set rsCats = Nothing

Login.Close()
Set Login = Nothing

response.redirect ("newcat.asp")
END IF
END IF


%>
<%

If Session("UserID") = "1" Then

Dim rsUsers
Dim rsUsers_numRows

Set rsUsers = Server.CreateObject("ADODB.Recordset")
rsUsers.ActiveConnection = MM_mygallery_STRING
rsUsers.Source = "SELECT *  FROM UsersQuery  ORDER BY UserID ASC;"
rsUsers.CursorType = 0
rsUsers.CursorLocation = 2
rsUsers.LockType = 1
rsUsers.Open()

rsUsers_numRows = 0
END IF
%>

<%
Dim Repeat1__numRows
Repeat1__numRows = 30
Dim Repeat1__index
Repeat1__index = 0
rsPictures_numRows = rsPictures_numRows + Repeat1__numRows
%>
<%
'  *** Recordset Stats, Move To Record, and Go To Record: declare stats variables

' set the record count
rsPictures_total = rsPictures.RecordCount

' set the number of rows displayed on this page
If (rsPictures_numRows < 0) Then
  rsPictures_numRows = rsPictures_total
Elseif (rsPictures_numRows = 0) Then
  rsPictures_numRows = 1
End If

' set the first and last displayed record
rsPictures_first = 1
rsPictures_last  = rsPictures_first + rsPictures_numRows - 1

' if we have the correct record count, check the other stats
If (rsPictures_total <> -1) Then
  If (rsPictures_first > rsPictures_total) Then rsPictures_first = rsPictures_total
  If (rsPictures_last > rsPictures_total) Then rsPictures_last = rsPictures_total
  If (rsPictures_numRows > rsPictures_total) Then rsPictures_numRows = rsPictures_total
End If
%>
<%
' *** Recordset Stats: if we don't know the record count, manually count them

If (rsPictures_total = -1) Then

  ' count the total records by iterating through the recordset
  rsPictures_total=0
  While (Not rsPictures.EOF)
    rsPictures_total = rsPictures_total + 1
    rsPictures.MoveNext
  Wend

  ' reset the cursor to the beginning
  If (rsPictures.CursorType > 0) Then
    rsPictures.MoveFirst
  Else
    rsPictures.Requery
  End If

  ' set the number of rows displayed on this page
  If (rsPictures_numRows < 0 Or rsPictures_numRows > rsPictures_total) Then
    rsPictures_numRows = rsPictures_total
  End If

  ' set the first and last displayed record
  rsPictures_first = 1
  rsPictures_last = rsPictures_first + rsPictures_numRows - 1
  If (rsPictures_first > rsPictures_total) Then rsPictures_first = rsPictures_total
  If (rsPictures_last > rsPictures_total) Then rsPictures_last = rsPictures_total

End If
%>
<%
' *** Move To Record and Go To Record: declare variables

Set MM_rs    = rsPictures
MM_rsCount   = rsPictures_total
MM_size      = rsPictures_numRows
MM_uniqueCol = ""
MM_paramName = ""
MM_offset = 0
MM_atTotal = false
MM_paramIsDefined = false
If (MM_paramName <> "") Then
  MM_paramIsDefined = (Request.QueryString(MM_paramName) <> "")
End If
%>
<%
' *** Move To Record: handle 'index' or 'offset' parameter

if (Not MM_paramIsDefined And MM_rsCount <> 0) then

  ' use index parameter if defined, otherwise use offset parameter
  r = Request.QueryString("index")
  If r = "" Then r = Request.QueryString("offset")
  If r <> "" Then MM_offset = Int(r)

  ' if we have a record count, check if we are past the end of the recordset
  If (MM_rsCount <> -1) Then
    If (MM_offset >= MM_rsCount Or MM_offset = -1) Then  ' past end or move last
      If ((MM_rsCount Mod MM_size) > 0) Then         ' last page not a full repeat region
        MM_offset = MM_rsCount - (MM_rsCount Mod MM_size)
      Else
        MM_offset = MM_rsCount - MM_size
      End If
    End If
  End If

  ' move the cursor to the selected record
  i = 0
  While ((Not MM_rs.EOF) And (i < MM_offset Or MM_offset = -1))
    MM_rs.MoveNext
    i = i + 1
  Wend
  If (MM_rs.EOF) Then MM_offset = i  ' set MM_offset to the last possible record

End If
%>
<%
' *** Move To Record: if we dont know the record count, check the display range

If (MM_rsCount = -1) Then

  ' walk to the end of the display range for this page
  i = MM_offset
  While (Not MM_rs.EOF And (MM_size < 0 Or i < MM_offset + MM_size))
    MM_rs.MoveNext
    i = i + 1
  Wend

  ' if we walked off the end of the recordset, set MM_rsCount and MM_size
  If (MM_rs.EOF) Then
    MM_rsCount = i
    If (MM_size < 0 Or MM_size > MM_rsCount) Then MM_size = MM_rsCount
  End If

  ' if we walked off the end, set the offset based on page size
  If (MM_rs.EOF And Not MM_paramIsDefined) Then
    If (MM_offset > MM_rsCount - MM_size Or MM_offset = -1) Then
      If ((MM_rsCount Mod MM_size) > 0) Then
        MM_offset = MM_rsCount - (MM_rsCount Mod MM_size)
      Else
        MM_offset = MM_rsCount - MM_size
      End If
    End If
  End If

  ' reset the cursor to the beginning
  If (MM_rs.CursorType > 0) Then
    MM_rs.MoveFirst
  Else
    MM_rs.Requery
  End If

  ' move the cursor to the selected record
  i = 0
  While (Not MM_rs.EOF And i < MM_offset)
    MM_rs.MoveNext
    i = i + 1
  Wend
End If
%>
<%
' *** Move To Record: update recordset stats

' set the first and last displayed record
rsPictures_first = MM_offset + 1
rsPictures_last  = MM_offset + MM_size
If (MM_rsCount <> -1) Then
  If (rsPictures_first > MM_rsCount) Then rsPictures_first = MM_rsCount
  If (rsPictures_last > MM_rsCount) Then rsPictures_last = MM_rsCount
End If

' set the boolean used by hide region to check if we are on the last record
MM_atTotal = (MM_rsCount <> -1 And MM_offset + MM_size >= MM_rsCount)
%>
<%
' *** Go To Record and Move To Record: create strings for maintaining URL and Form parameters

' create the list of parameters which should not be maintained
MM_removeList = "&index="
If (MM_paramName <> "") Then MM_removeList = MM_removeList & "&" & MM_paramName & "="
MM_keepURL="":MM_keepForm="":MM_keepBoth="":MM_keepNone=""

' add the URL parameters to the MM_keepURL string
For Each Item In Request.QueryString
  NextItem = "&" & Item & "="
  If (InStr(1,MM_removeList,NextItem,1) = 0) Then
    MM_keepURL = MM_keepURL & NextItem & Server.URLencode(Request.QueryString(Item))
  End If
Next

' add the Form variables to the MM_keepForm string
For Each Item In Request.Form
  NextItem = "&" & Item & "="
  If (InStr(1,MM_removeList,NextItem,1) = 0) Then
    MM_keepForm = MM_keepForm & NextItem & Server.URLencode(Request.Form(Item))
  End If
Next

' create the Form + URL string and remove the intial '&' from each of the strings
MM_keepBoth = MM_keepURL & MM_keepForm
if (MM_keepBoth <> "") Then MM_keepBoth = Right(MM_keepBoth, Len(MM_keepBoth) - 1)
if (MM_keepURL <> "")  Then MM_keepURL  = Right(MM_keepURL, Len(MM_keepURL) - 1)
if (MM_keepForm <> "") Then MM_keepForm = Right(MM_keepForm, Len(MM_keepForm) - 1)

' a utility function used for adding additional parameters to these strings
Function MM_joinChar(firstItem)
  If (firstItem <> "") Then
    MM_joinChar = "&"
  Else
    MM_joinChar = ""
  End If
End Function
%>
<%
' *** Move To Record: set the strings for the first, last, next, and previous links

MM_keepMove = MM_keepBoth
MM_moveParam = "index"

' if the page has a repeated region, remove 'offset' from the maintained parameters
If (MM_size > 0) Then
  MM_moveParam = "offset"
  If (MM_keepMove <> "") Then
    params = Split(MM_keepMove, "&")
    MM_keepMove = ""
    For i = 0 To UBound(params)
      nextItem = Left(params(i), InStr(params(i),"=") - 1)
      If (StrComp(nextItem,MM_moveParam,1) <> 0) Then
        MM_keepMove = MM_keepMove & "&" & params(i)
      End If
    Next
    If (MM_keepMove <> "") Then
      MM_keepMove = Right(MM_keepMove, Len(MM_keepMove) - 1)
    End If
  End If
End If

' set the strings for the move to links
If (MM_keepMove <> "") Then MM_keepMove = MM_keepMove & "&"
urlStr = Request.ServerVariables("URL") & "?" & MM_keepMove & MM_moveParam & "="
MM_moveFirst = urlStr & "0"
MM_moveLast  = urlStr & "-1"
MM_moveNext  = urlStr & Cstr(MM_offset + MM_size)
prev = MM_offset - MM_size
If (prev < 0) Then prev = 0
MM_movePrev  = urlStr & Cstr(prev)
%>
<!--'My ASP Thumbnail Gallery' is a product of Kattouf Internet Services.
Url: http://www.kattouf.com
Email: johnny@kattouf.com
 -->
<html>
<head>
<title>Administration</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language="JavaScript">
<!--
function GP_popupConfirmMsg(msg) { //v1.0
  document.MM_returnValue = confirm(msg);
}

function MM_openBrWindow(theURL,winName,features, myWidth, myHeight, isCenter) { //v3.0
  if(window.screen)if(isCenter)if(isCenter=="true"){
    var myLeft = (screen.width-myWidth)/2;
    var myTop = (screen.height-myHeight)/2;
    features+=(features!='')?',':'';
    features+=',left='+myLeft+',top='+myTop;
  }
  window.open(theURL,winName,features+((features!='')?',':'')+'width='+myWidth+',height='+myHeight);
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_validateForm() { //v4.0
  var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
  for (i=0; i<(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
    if (val) { nm=val.name; if ((val=val.value)!="") {
      if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
        if (p<1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
      } else if (test!='R') { num = parseFloat(val);
        if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
        if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
          min=test.substring(8,p); max=test.substring(p+1);
          if (num<min || max<num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
    } } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
  } if (errors) alert('The following error(s) occurred:\n'+errors);
  document.MM_returnValue = (errors == '');
}
//-->
</script>
<link href="style.css" rel="stylesheet" type="text/css">
</head>
<body OnLoad='document.login.username.focus()' leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" >
<table width="757" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="1" background="images/pixi_dark_grey.gif"><img src="images/pixi_dark_grey.gif" width="1" height="1"></td>
    <td width="755">
      <table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr background="images/pixi_light_blue.gif">
          <td><img src="images/pixi_light_blue.gif" width="1" height="14"></td>
        </tr>
        <tr>
          <td height="17" valign="middle" background="images/pixi_grey_blue.gif"><img src="images/pixi_grey_blue.gif" width="25" height="17" align="absmiddle"><a href="list.asp"><img src="images/home.gif" width="80" height="17" border="0" align="absmiddle"></a><a href="newcat.asp"><img src="images/cat.gif" width="137" height="17" border="0" align="absmiddle"></a><a href="addnew.asp"><img src="images/image.gif" width="132" height="17" border="0" align="absmiddle"></a><a href="index.asp"><img src="images/view.gif" width="104" height="17" border="0" align="absmiddle"></a>
            <% If Session("UserID") = "1" Then %>
<a href="users.asp"><img src="images/users.gif" width="113" height="17" border="0" align="absmiddle"></a>
<a href="settings.asp"><img src="images/settings.gif" width="110" height="17" border="0" align="absmiddle"></a>
            <% End If%></td>
        </tr>
        <tr>
          <td align="right" valign="top" background="images/pixi_grey.gif"><div align="right"><img src="images/heading_pic.gif" width="157" height="26"></div></td>
        </tr>
        <tr>
          <td><TABLE width="100%" BORDER=0 CELLPADDING=0 CELLSPACING=0>
              <TR>
                <TD width="354"> <IMG SRC="images/nav1_01.gif" WIDTH=354 HEIGHT=39></TD>
                <TD width="16"> <IMG SRC="images/nav1_02.gif" WIDTH=16 HEIGHT=39></TD>
                <TD width="269"> <IMG SRC="images/nav1_01.gif" WIDTH=269 HEIGHT=39></TD>
                <TD width="20"> <IMG SRC="images/nav1_02.gif" WIDTH=16 HEIGHT=39></TD>
                <TD background="images/nav1_01.gif"> <IMG SRC="images/nav1_01.gif" WIDTH=100 HEIGHT=39></TD>
              </TR>
            </TABLE>
          </td>
        </tr>
        <tr>
          <td><table width="100%" border="0" cellspacing="0" cellpadding="5">
              <tr>
                <td align="center" valign="top">                  <p>
                  <% IF Session("loggedin") = "" THEN %>
                </p>
                  <p align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">
                    <% If Request.Querystring("Newmem") <> "" Then %>
                    <font color="#FF0000" size="2">Your account has been created, you must now login bellow
                    to access your gallery.</font>                    <% End If %>
</font></p>
                  <table width="80%" border="0" cellspacing="1" cellpadding="2">
                    <tr>
                      <td width="50%" align="left" valign="top"><p>Welcome!                        
                      </td>
                      <td valign="top"><form action="" method="post" name="login" id="login">
                      <table width="300" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#000000">
                      <tr>
                        <td colspan="2" bgcolor="#6699CC"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Please
                            login order to manage the photobook.</font></td>
                      </tr>
                      <tr>
                        <td bgcolor="#6699CC"><strong><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Username:</font></strong></td>
                        <td background="images/pixi_light_blue.gif" bgcolor="#0099CC"><input name="username" type="text" id="username" size="20">
                        </td>
                      </tr>
                      <tr>
                        <td bgcolor="#6699CC"><strong><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Password:</font></strong></td>
                        <td background="images/pixi_light_blue.gif" bgcolor="#0099CC"><input name="password" type="password" id="password" size="20">
                        </td>
                      </tr>
                      <tr>
                        <td bgcolor="#6699CC">&nbsp;</td>
                        <td background="images/pixi_light_blue.gif" bgcolor="#0099CC"><input type="submit" name="Submit4" value="Enter">
                        </td>
                      </tr>
                    </table>
                  </form>
</td>
                    </tr>
                  </table>
                  <p align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">                  </font></p>           
                  <% ELSE %>
                  <p align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Viewing
                      Records <%=(rsPictures_first)%> to <%=(rsPictures_last)%> of <%=(rsPictures_total)%>
    <%If Session("UserID") = "1" Then%>
  for user : <%IF Request.Form("User") <> "%" THEN %>
<a href="mailto:<%=(rsPictures.Fields.Item("Email").Value)%>"><%=(rsPictures.Fields.Item("Username").Value)%></a>
<%ELSE%>
ALL
<% END IF%>
  <%END IF%>
                  </font></p>
                  <table width="650" border="0" align="center" cellpadding="2" cellspacing="1">
                    <tr>
                      <td width="450"><table width="450" border="0" align="center" cellpadding="2" cellspacing="1">
                          <tr align="center" valign="middle">
                            <% If Session("UserID") = "1" THEN %>
                            <form action="list.asp" method="post" name="filteruser" id="filteruser">
                              <td> <font size="1" face="Verdana, Arial, Helvetica, sans-serif">Filter
                                  by User:<br>
                                </font>
                                  <select name="User" id="select6">
                                    <option value="%" <%If (Not isNull(rsCats__MMUserID)) Then If ("%" = CStr(rsCats__MMUserID)) Then Response.Write("SELECTED") : Response.Write("")%>>All
                                    Users</option>
                                    <%
While (NOT rsUsers.EOF)
%>
                                    <option value="<%=(rsUsers.Fields.Item("UserID").Value)%>" <%If (Not isNull(rsCats__MMUserID)) Then If (CStr(rsUsers.Fields.Item("UserID").Value) = CStr(rsCats__MMUserID)) Then Response.Write("SELECTED") : Response.Write("")%> ><%=(rsUsers.Fields.Item("Username").Value)%> (<%=(rsUsers.Fields.Item("CountofID").Value)%>)</option>
                                    <%
  rsUsers.MoveNext()
Wend
If (rsUsers.CursorType > 0) Then
  rsUsers.MoveFirst
Else
  rsUsers.Requery
End If
%>
                                  </select>
                                  <input type="submit" name="Submit5" value="Filter">
                              </td>
                              <td><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Then &gt;</font></td>
                            </form>
                            <% END IF %>
                            <form action="list.asp" method="post" name="filtercat" id="filtercat">
                              <td> <font size="1" face="Verdana, Arial, Helvetica, sans-serif">Filter
                                  by Category:</font><br>
                            <select name="category" id="select7">
                              <option value="%" <%If (Not isNull(Request("category"))) Then If ("%" = CStr(Request("category"))) Then Response.Write("SELECTED") : Response.Write("")%>>All</option>
                              <%
While (NOT rsCats.EOF)
%>
                              <option value="<%=(rsCats.Fields.Item("Category").Value)%>" <%If (Not isNull(Request("category"))) Then If (CStr(rsCats.Fields.Item("Category").Value) = CStr(Request("category"))) Then Response.Write("SELECTED") : Response.Write("")%> ><%=(rsCats.Fields.Item("Category").Value)%> (<%=(rsCats.Fields.Item("CountofID").Value)%>)</option>
                              <%
  rsCats.MoveNext()
Wend
If (rsCats.CursorType > 0) Then
  rsCats.MoveFirst
Else
  rsCats.Requery
End If
%>
                            </select>
                            <input type="submit" name="Submit2" value="Filter">
                            <input name="User" type="hidden" id="select6" value="<%= rsCats__MMUserID %>">
                              </td>
                            </form>
                          </tr>
                        </table>
                      </td>
                      <form name="form2" method="post" action="">
                        <td width="239" height="50%" align="center" valign="middle">                          
                            <font size="1" face="Verdana, Arial, Helvetica, sans-serif">Log
                            Out:</font><br>
                          <input type="submit" name="Submit6" value="Logout">
                            <input name="logout" type="hidden" id="logout" value="1">
                        </td>
                      </form>
                    </tr>
                  </table>
                  <p align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif"></font></p>
                  <table border="0" width="50%" align="center">
                    <tr>
                      <td width="23%" align="center">
                        <% If MM_offset <> 0 Then %>
                        <a href="<%=MM_moveFirst%>">First</a>
                        <% End If ' end MM_offset <> 0 %>
                      </td>
                      <td width="31%" align="center">
                        <% If MM_offset <> 0 Then %>
                        <a href="<%=MM_movePrev%>">Previous</a>
                        <% End If ' end MM_offset <> 0 %>
                      </td>
                      <td width="23%" align="center">
                        <% If Not MM_atTotal Then %>
                        <a href="<%=MM_moveNext%>">Next</a>
                        <% End If ' end Not MM_atTotal %>
                      </td>
                      <td width="23%" align="center">
                        <% If Not MM_atTotal Then %>
                        <a href="<%=MM_moveLast%>">Last</a>
                        <% End If ' end Not MM_atTotal %>
                      </td>
                    </tr>
                  </table>
                  <table width="650" border="0" cellspacing="1" cellpadding="2" align="center" bgcolor="#000000">
                    <tr valign="top" align="left" bgcolor="#FFFFFF">
                      <td width="132" nowrap><b><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Category</font></b></td>
                      <td width="183" nowrap><b><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Image
                            (Click to view)</font></b></td>
                      <td width="251"><b><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Description</font></b></td>
                      <td colspan="2" nowrap><b><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Manage</font></b></td>
                    </tr>
                    <% 
While ((Repeat1__numRows <> 0) AND (NOT rsPictures.EOF)) 
%>
                    <tr valign="top" align="left" bgcolor="#0099CC">
                      <td nowrap bgcolor="#6699CC"><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><%=(rsPictures.Fields.Item("Category").Value)%></font></td>
                      <td nowrap background="images/pixi_light_blue.gif" bgcolor="#CCFFFF"><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><a href="#" onClick="MM_openBrWindow('largeview.asp?Image=<%=(rsPictures.Fields.Item("Username").Value)%>/<%=(rsPictures.Fields.Item("Image").Value)%>','LargeView','scrollbars=yes,resizable=yes','800','600','false')"><%=(rsPictures.Fields.Item("Image").Value)%></a></font></td>
                      <td background="images/pixi_light_blue.gif" bgcolor="#CCFFFF"><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><%=(rsPictures.Fields.Item("Description").Value)%></font></td>
                      <form name="form1" method="POST" action="<%=MM_editAction%>">
                        <td width="21" align="center" background="images/pixi_light_blue.gif" bgcolor="#CCFFFF"> <font face="Verdana, Arial, Helvetica, sans-serif" size="1">
                          <input name="imageField" type="image" src="images/del.gif" width="21" height="21" border="0" onClick="GP_popupConfirmMsg('Are you sure you want to delete this record?');return document.MM_returnValue">
                          <input type="hidden" name="MM_delete" value="true">
                          <input name="Username" type="hidden" id="Username" value="<%=(rsPictures.Fields.Item("Username").Value)%>">
                          <input name="Image" type="hidden" id="Image" value="<%=(rsPictures.Fields.Item("Image").Value)%>">
                          <input type="hidden" name="MM_recordId" value="<%= rsPictures.Fields.Item("ID").Value %>">
                          <input name="User" type="hidden" id="User" value="<%= rsCats__MMUserID %>">
                          <input name="UserIDdelete" type="hidden" id="UserIDdelete" value="<%=Session("UserID")%>">
                          <input name="CatID" type="hidden" id="CatID" value="<%=(rsPictures.Fields.Item("CatID").Value)%>">
</font> </td>
                        <td width="37" align="center" background="images/pixi_light_blue.gif" bgcolor="#CCFFFF"><a href="update.asp?ID=<%=(rsPictures.Fields.Item("ID").Value)%>"><img src="images/edit.gif" width="21" height="21" border="0"></a></td>
                      </form>
                    </tr>
                    <% 
  Repeat1__index=Repeat1__index+1
  Repeat1__numRows=Repeat1__numRows-1
  rsPictures.MoveNext()
Wend
%>
                  </table>
                  <p>Your individual gallery URL is: <a href="<%=(Login.Fields.Item("SiteURL").Value)%>index.asp?UserID=<%=(Login.Fields.Item("UserID").Value)%>"><%=(Login.Fields.Item("SiteURL").Value)%>index.asp?UserID=<%=(Login.Fields.Item("UserID").Value)%></a> </p>
                  
                                  <form method="post" action="<%=MM_editAction%>" name="form3">
                    <table width="300" border="0" align="center" cellpadding="2" cellspacing="1" bgcolor="#000000">
                      <tr>
                        <td colspan="2" align="right" valign="baseline" nowrap bgcolor="#6699CC"><div align="left"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Update
                        Account Details</font></div></td>
                      </tr>
                      <tr>
                        <td width="65" align="right" bgcolor="#6699CC"><div align="right"><strong><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Email:</font></strong></div></td>
                        <td width="224" valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#CCFFFF">
                          <input name="Email" type="text" id="Emailupdate" value="<%=(Login.Fields.Item("Email").Value)%>" size="20">
                        </td>
                      </tr>
                      <tr>
                        <td align="right" bgcolor="#6699CC"><div align="right"><strong><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Username:</font></strong></div></td>
                        <td valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#CCFFFF">
                          <input name="Username" type="text" id="usernameupdate" value="<%=(Login.Fields.Item("Username").Value)%>" size="20">
                        </td>
                      </tr>
                      <tr>
                        <td width="65" align="right" bgcolor="#6699CC"><div align="right"><strong><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Password:</font></strong></div></td>
                        <td valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#CCFFFF">
                          <input name="Password" type="password" id="passwordupdate" value="<%=(Login.Fields.Item("Password").Value)%>" size="20">
                        </td>
                      </tr>
                      <tr>
                        <td width="65" align="right" bgcolor="#6699CC"><div align="right"></div></td>
                        <td valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#CCFFFF">
                          <input type="submit" onClick="MM_validateForm('Emailupdate','','RisEmail','usernameupdate','','R','passwordupdate','','R');return document.MM_returnValue" value="Update Record">
                        </td>
                      </tr>
                    </table>
                    <input type="hidden" name="MM_update" value="form3">
                    <input type="hidden" name="MM_recordId" value="<%= Login.Fields.Item("UserID").Value %>">
                  </form>
                  <p>&nbsp;</p>                  <p align="center"><a href="addnew.asp"><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Add
                        new image</font></a><font size="2" face="Verdana, Arial, Helvetica, sans-serif"> - <a href="newcat.asp">Manage
                        categories</a> - <a href="index.asp">View Gallery</a></font></p>
                <% END IF%><h2>&nbsp;</h2>                  </td>
              </tr>
            </table>
          </td>
        </tr>
        <tr>
          <td>&nbsp;</td>
        </tr>
        <tr>
          <td align="right" background="images/base2.gif">
            <p>v5.0</p>
          </td>
        </tr>
        <tr>
          <td background="images/pixi_grey_blue.gif"><img src="images/pixi_grey_blue.gif" width="1" height="17"></td>
        </tr>
      </table>
    </td>
    <td width="1" background="images/pixi_dark_grey.gif"><img src="images/pixi_dark_grey.gif" width="1" height="1"></td>
  </tr>
</table>
<hr width="600" size="1">
<p align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">'My ASP Thumbnail Gallery' is a product of <a href="http://www.kattouf.com">Kattouf 
  Internet Services</a> Email: <a href="mailto:johnny@kattouf.com">johnny@kattouf.com</a></font><br>
</p>
</body>
</html>
<%
rsPictures.Close()
Set rsPictures = Nothing
%>
<%
IF Session("UserID") <> "" THEN
rsCats.Close()
Set rsCats = Nothing
END IF
%>
<%
Login.Close()
Set Login = Nothing
%>
<%
If Session("UserID") = "1" Then
rsUsers.Close()
Set rsUsers = Nothing
END IF
%>
<%
If Request.Form("UserIDdelete") <> "" THEN
rsUsercheck.Close()
Set rsUsercheck = Nothing
END IF
%>