<%@LANGUAGE="VBSCRIPT"%>
<!--#include file="Connections/mygallery.asp" -->
<% IF Session("Loggedin") = "" THEN

Response.redirect("list.asp")
END IF
%>

<%
' *** Edit Operations: declare variables

MM_editAction = CStr(Request("URL"))
If (Request.QueryString <> "") Then
  MM_editAction = MM_editAction & "?" & Request.QueryString
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Insert Record: set variables

If (CStr(Request("MM_insert")) <> "") Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Category"
  MM_editRedirectUrl = "addnew.asp"
  MM_fieldsStr  = "Category|value|password|value|User|value"
  MM_columnsStr = "Category|',none,''|Password|',none,''|UserID|none,none,NULL"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(i+1) = CStr(Request.Form(MM_fields(i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Delete Record: declare variables

if (CStr(Request("MM_delete")) = "form2" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Category"
  MM_editColumn = "CatID"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = ""

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If
  
End If
%>
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) = "form3" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Category"
  MM_editColumn = "CatID"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = "newcat.asp"
  MM_fieldsStr  = "password|value"
  MM_columnsStr = "Password|',none,''"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Delete Record: declare variables

if CStr(Request("MM_delete")) <> "" Then

  MM_editConnection = MM_mygallery_STRING
  MM_editTable = "Category"
  MM_editColumn = "CatID"
  MM_recordId =  Request.Form("deletecat")
  MM_editRedirectUrl = ""

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If
  
End If
%>
<%
' *** Insert Record: construct a sql insert statement and execute it

If (CStr(Request("MM_insert")) <> "") Then

  ' create the sql insert statement
  MM_tableValues = ""
  MM_dbValues = ""
  For i = LBound(MM_fields) To UBound(MM_fields) Step 2
    FormVal = MM_fields(i+1)
    MM_typeArray = Split(MM_columns(i+1),",")
    Delim = MM_typeArray(0)
    If (Delim = "none") Then Delim = ""
    AltVal = MM_typeArray(1)
    If (AltVal = "none") Then AltVal = ""
    EmptyVal = MM_typeArray(2)
    If (EmptyVal = "none") Then EmptyVal = ""
    If (FormVal = "") Then
      FormVal = EmptyVal
    Else
      If (AltVal <> "") Then
        FormVal = AltVal
      ElseIf (Delim = "'") Then  ' escape quotes
        FormVal = "'" & Replace(FormVal,"'","''") & "'"
      Else
        FormVal = Delim + FormVal + Delim
      End If
    End If
    If (i <> LBound(MM_fields)) Then
      MM_tableValues = MM_tableValues & ","
      MM_dbValues = MM_dbValues & ","
    End if
    MM_tableValues = MM_tableValues & MM_columns(i)
    MM_dbValues = MM_dbValues & FormVal
  Next
  MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")"

  If (Not MM_abortEdit) Then
    ' execute the insert
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
' *** Delete Record: construct a sql delete statement and execute it

If CStr(Request("MM_delete")) <> ""  Then

  ' create the sql delete statement
  MM_editQuery = "delete from " & MM_editTable & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the delete
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
	Set fso = CreateObject("Scripting.FileSystemObject")
     folderPath = Server.MapPath("..\cgi-bin\mypics")
      folderPath = folderPath & "\" & Session("Username")
     folderPath = folderPath & "\" & Request.Form("Deletecat")
	'response.write Imagepath      
	'File.DeleteFile(ImagePath)

If fso.FolderExists(folderpath) Then
Set folderObject = fso.GetFolder((folderpath) & "\")
folderObject.Delete
end if
Set folderObject = Nothing
Set fso = Nothing

    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql update statement
  MM_editQuery = "update " & MM_editTable & " set "
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),",")
    MM_delim = MM_typeArray(0)
    If (MM_delim = "none") Then MM_delim = ""
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = "none") Then MM_altVal = ""
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = "none") Then MM_emptyVal = ""
    If (MM_formVal = "") Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal <> "") Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = "'") Then  ' escape quotes
        MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i <> LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery & ","
    End If
    MM_editQuery = MM_editQuery & MM_columns(MM_i) & " = " & MM_formVal
  Next
  MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the update
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
Dim rsCat__MMColParam
rsCat__MMColParam = "1"
If (Session("UserID") <> "") Then 
  rsCat__MMColParam = Session("UserID")
End If
%>
<%
set rsCat = Server.CreateObject("ADODB.Recordset")
rsCat.ActiveConnection = MM_mygallery_STRING
rsCat.Source = "SELECT * FROM Category WHERE UserID = " + Replace(rsCat__MMColParam, "'", "''") + " ORDER BY CatID DESC"
rsCat.CursorType = 0
rsCat.CursorLocation = 2
rsCat.LockType = 3
rsCat.Open()
rsCat_numRows = 0
%>
<!--'My ASP Thumbnail Gallery' is a product of Kattouf Internet Services.
Url: http://www.kattouf.com
Email: johnny@kattouf.com
 -->
<html>
<head>
<title>Add new Category</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language="JavaScript">
<!--
function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function YY_checkform() { //v4.07
//copyright (c)1998,2001 Yaromat.com
  var args = YY_checkform.arguments,myDot=true,myV='',myErr='',addErr=false,myReq,rx,myObj1,myMa,myAt;
  for (var i=1; i<args.length;i=i+4){
    if (args[i+1].charAt(0)=='#'){myReq=true; args[i+1]=args[i+1].substring(1);}else{myReq=false}
    var myObj = MM_findObj(args[i].replace(/\[\d+\]/ig,""));myV=myObj.value;
    if (myObj.type=='text'||myObj.type=='password'){
      if (myReq&&myObj.value.length==0)addErr=true;
      if ((myV.length>0)&&(args[i+2]==1)){ //fromto
        if (!(myV/1)||myV<args[i+1].split('_')[0]/1||myV > args[i+1].split('_')[1]/1){addErr=true}
      }
      if ((myV.length>0)&&(args[i+2]==2)){ // email
            rx=new RegExp("^[\\w\.=-]+@[\\w\\.-]+\\.[a-z]{2,4}$");if(!rx.test(myV))addErr=true;
          }
      if ((myV.length>0)&&(args[i+2]==3)){ // date
        myMa=args[i+1].split("#");myAt=myV.match(myMa[0]);
        if(myAt){
          var myD=(myAt[myMa[1]])?myAt[myMa[1]]:1; var myM=myAt[myMa[2]]-1; var myY=myAt[myMa[3]];
          var myDate=new Date(myY,myM,myD);
          if(myDate.getFullYear()!=myY||myDate.getDate()!=myD||myDate.getMonth()!=myM){addErr=true};
        }else{addErr=true}
      }
      if ((myV.length>0)&&(args[i+2]==4)){myMa=args[i+1].split("#");myAt=myV.match(myMa[0]);if(!myAt)addErr=true}// time
      if (myV.length>0&&args[i+2]==5){ // check this 2
        var myObj1 = MM_findObj(args[i+1].replace(/\[\d+\]/ig,""));
        if(myObj1.length)myObj1=myObj1[args[i+1].replace(/(.*\[)|(\].*)/ig,"")];
        if(!myObj1.checked)addErr=true;
      }
      if (myV.length>0&&args[i+2]==6){myObj1=MM_findObj(args[i+1]);if(myV!=myObj1.value)addErr=true;}// the same
    }else
    if (!myObj.type&&myObj.length>0&&myObj[0].type=='radio'){
          var myTest = args[i].match(/(.*)\[(\d+)\].*/i);
          var myObj1=(myObj.length>1)?myObj[myTest[2]]:myObj;
      if (args[i+2]==1&&myObj1&&myObj1.checked&&MM_findObj(args[i+1]).value.length/1==0){addErr=true}
      if (args[i+2]==2){
        var myDot=false;
        for(var j=0;j<myObj.length;j++){myDot=myDot||myObj[j].checked}
        if(!myDot){myErr+='* ' +args[i+3]+'\n'}
      }
    }else
    if (myObj.type=='checkbox'){
      if(args[i+2]==1&&myObj.checked==false){addErr=true}
      if(args[i+2]==2&&myObj.checked&&MM_findObj(args[i+1]).value.length/1==0){addErr=true}
    }else
    if (myObj.type=='select-one'||myObj.type=='select-multiple'){
      if(args[i+2]==1&&myObj.selectedIndex/1==0){addErr=true}
    }else
    if (myObj.type=='textarea'){
      if(myV.length<args[i+1]){addErr=true}
    }
    if (addErr){myErr+='* '+args[i+3]+'\n'; addErr=false}
  }
  if (myErr!=''){alert('The required information is incomplete or contains errors:\t\t\t\t\t\n\n'+myErr)}
  document.MM_returnValue = (myErr=='');
}

function GP_popupConfirmMsg(msg) { //v1.0
  document.MM_returnValue = confirm(msg);
}
//-->
</script>
<link href="style.css" rel="stylesheet" type="text/css">
</head>
<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<div align="center">
  <table width="757" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr>
      <td width="1" background="images/pixi_dark_grey.gif"><img src="images/pixi_dark_grey.gif" width="1" height="1"></td>
      <td width="755">
        <table width="100%" border="0" cellspacing="0" cellpadding="0">
          <tr background="images/pixi_light_blue.gif">
            <td><img src="images/pixi_light_blue.gif" width="1" height="14"></td>
          </tr>
          <tr>
            <td height="17" valign="middle" background="images/pixi_grey_blue.gif"><img src="images/pixi_grey_blue.gif" width="25" height="17" align="absmiddle"><a href="list.asp"><img src="images/home.gif" width="80" height="17" border="0" align="absmiddle"></a><a href="newcat.asp"><img src="images/cat.gif" width="137" height="17" border="0" align="absmiddle"></a><a href="addnew.asp"><img src="images/image.gif" width="132" height="17" border="0" align="absmiddle"></a><a href="index.asp"><img src="images/view.gif" width="104" height="17" border="0" align="absmiddle"></a>
                <% If Session("UserID") = "1" Then %>
                <a href="users.asp"><img src="images/users.gif" width="113" height="17" border="0" align="absmiddle"></a> <a href="settings.asp"><img src="images/settings.gif" width="110" height="17" border="0" align="absmiddle"></a>
                <% End If%>
            </td>
          </tr>
          <tr>
            <td align="right" valign="top" background="images/pixi_grey.gif"><img src="images/heading_pic.gif" width="157" height="26"></td>
          </tr>
          <tr>
            <td><TABLE width="100%" BORDER=0 CELLPADDING=0 CELLSPACING=0>
                <TR>
                  <TD width="354"> <IMG SRC="images/nav1_01.gif" WIDTH=354 HEIGHT=39></TD>
                  <TD width="16"> <IMG SRC="images/nav1_02.gif" WIDTH=16 HEIGHT=39></TD>
                  <TD width="269"> <IMG SRC="images/nav1_01.gif" WIDTH=269 HEIGHT=39></TD>
                  <TD width="20"> <IMG SRC="images/nav1_02.gif" WIDTH=16 HEIGHT=39></TD>
                  <TD background="images/nav1_01.gif"> <IMG SRC="images/nav1_01.gif" WIDTH=100 HEIGHT=39></TD>
                </TR>
              </TABLE>
            </td>
          </tr>
          <tr>
            <td><table width="100%" border="0" cellspacing="0" cellpadding="5">
                <tr>
                  <td align="center" valign="top"><p align="center"><form method="POST" action="<%=MM_editAction%>" name="form1" onSubmit="YY_checkform('form1','Category','#q','0','Category field is required');return document.MM_returnValue">
                  <table align="center" width="320" cellspacing="1" cellpadding="3" border="0" bgcolor="#000000">
	<tr> 
	  <td nowrap align="right" bgcolor="#6699CC"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Create
	        Category:</b></font></td>
	  <td valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#0099CC"> 
		<input type="text" name="Category" value="" size="32">
	  </td>
	</tr>
	<tr>
	  <td nowrap align="right" bgcolor="#6699CC" valign="baseline"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><b>Password</b><font size="1">(optional)</font><b>:</b></font></td>
	  <td valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#0099CC"><input name="password" type="text" id="password" size="32"></td>
    </tr>
	<tr> 
	  <td nowrap align="right" bgcolor="#6699CC" valign="baseline">&nbsp;</td>
	  <td valign="baseline" background="images/pixi_light_blue.gif" bgcolor="#0099CC"> 
		<input type="submit" value="Create Category">
		<input name="User" type="hidden" id="User" value="<%=session("UserID")%>">
	  </td>
	</tr>
  </table>
  <p>
    <input type="hidden" name="MM_insert" value="form1">
</p>
</form>
<hr width="500" color="black" size="1">
<% If Not rsCat.EOF Or Not rsCat.BOF Then %>
<form ACTION="<%=MM_editAction%>" METHOD="POST" name="form2">
  <div align="center"> 
    <table width="320" border="0" cellspacing="1" cellpadding="3" bgcolor="#000000">
      <tr> 
	    <td nowrap bgcolor="#6699CC" align="right"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Delete 
	    Category:                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       </b></font></td>
	    <td width="185" background="images/pixi_light_blue.gif" bgcolor="#0099CC"> 
	      <select name="Deletecat">
		    <%
While (NOT rsCat.EOF)
%>
		    <option value="<%=(rsCat.Fields.Item("CatID").Value)%>" <%if (CStr(rsCat.Fields.Item("CatID").Value) = CStr(rsCat_first)) then Response.Write("SELECTED") : Response.Write("")%> ><%=(rsCat.Fields.Item("Category").Value)%></option>
		    <%
  rsCat.MoveNext()
Wend
If (rsCat.CursorType > 0) Then
  rsCat.MoveFirst
Else
  rsCat.Requery
End If
%>
	      </select>
	    </td>
      </tr>
      <tr> 
	    <td nowrap bgcolor="#6699CC">&nbsp;</td>
	    <td width="185" background="images/pixi_light_blue.gif" bgcolor="#0099CC"> 
	      <input name="Submit" type="submit" onClick="GP_popupConfirmMsg('Are you sure you want to delete this category?');return document.MM_returnValue" value="Delete Category">
	    </td>
      </tr>
    </table>
    <p><font size="2">This will also delete all the image records associated
         with this category...<br>
      And all associated pictures from the server.</font></p>
    <p>
      <input type="hidden" name="MM_delete" value="form2">
      <input type="hidden" name="MM_recordId" value="<%= rsCat.Fields.Item("CatID").Value %>">
  </p>
  </div>
</form>
<% End If ' end Not rsCat.EOF Or NOT rsCat.BOF %>&nbsp;</p>
<hr width="500" color="black" size="1">
<% If Not rsCat.EOF Or Not rsCat.BOF Then %>
<form name="form3" method="POST" action="<%=MM_editAction%>">
  <table width="320" border="0" cellspacing="1" cellpadding="3" bgcolor="#000000">
    <tr>
      <td nowrap bgcolor="#6699CC" align="right"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Choose
            Category: </b></font></td>
      <td width="185" background="images/pixi_light_blue.gif" bgcolor="#0099CC">
        <select name="MM_recordId" id="MM_recordId">
          <%
While (NOT rsCat.EOF)
%>
          <option value="<%=(rsCat.Fields.Item("CatID").Value)%>" <%if (CStr(rsCat.Fields.Item("CatID").Value) = CStr(rsCat_first)) then Response.Write("SELECTED") : Response.Write("")%> ><%=(rsCat.Fields.Item("Category").Value)%></option>
          <%
  rsCat.MoveNext()
Wend
If (rsCat.CursorType > 0) Then
  rsCat.MoveFirst
Else
  rsCat.Requery
End If
%>
        </select>
      </td>
    </tr>
    <tr>
      <td align="right" nowrap bgcolor="#6699CC"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><b>New
            Password:</b></font></td>
      <td background="images/pixi_light_blue.gif" bgcolor="#0099CC"><input name="password" type="text" id="password" size="20">
      </td>
    </tr>
    <tr>
      <td nowrap bgcolor="#6699CC">&nbsp;</td>
      <td width="185" background="images/pixi_light_blue.gif" bgcolor="#0099CC">
        <input type="submit" name="Submit2" value="Update password">
        <input name="User2" type="hidden" id="User22" value="<%=session("UserID")%>">
      </td>
    </tr>
  </table>
  <input type="hidden" name="MM_update" value="form3">
</form>
<% End If ' end Not rsCat.EOF Or NOT rsCat.BOF %>
<p align="center"><a href="list.asp"><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Back
                            to list</font></a><font size="2" face="Verdana, Arial, Helvetica, sans-serif"> - <a href="newcat.asp">Manage
                            categories</a> - <a href="index.asp">View Gallery</a></font></p>
                      <h2>&nbsp;</h2>
                  </td>
                </tr>
              </table>
            </td>
          </tr>
          <tr>
            <td>&nbsp;</td>
          </tr>
          <tr>
            <td align="right" background="images/base2.gif">
              <p>v5.0</p>
            </td>
          </tr>
          <tr>
            <td background="images/pixi_grey_blue.gif"><img src="images/pixi_grey_blue.gif" width="1" height="17"></td>
          </tr>
        </table>
      </td>
      <td width="1" background="images/pixi_dark_grey.gif"><img src="images/pixi_dark_grey.gif" width="1" height="1"></td>
    </tr>
  </table>
  <p align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">'My
      ASP Thumbnail Gallery' is a product of <a href="http://www.kattouf.com">Kattouf
      Internet Services</a> Email: <a href="mailto:johnny@kattouf.com">johnny@kattouf.com</a></font><font color="#006699">  </font> </p>
</div>

</body>
</html>
<%
rsCat.Close()
%>