<%@ Language=JScript %> <% var name = prepSQL(Request.Form("name")); var countryid = prepSQL(Request.Form("country")); var birthday = prepSQL(Request.Form("birthday")); var birthmonth = prepSQL(Request.Form("birthmonth")); var birthyear = prepSQL(Request.Form("birthyear")); var timezoneid = prepSQL(Request.Form("timezone")); var icq = prepSQL(Request.Form("icq")); var description = prepSQL(Request.Form("description")); var gameinterest = Request.Form("gameinterest"); if (gameinterest == "on") gameinterest = 1; else gameinterest = 0; var conn = Server.CreateObject("adodb.connection"); conn.Open(connStr); var sql = "UPDATE [user] SET "; if (name != "") sql += "name = '" + name + "', "; sql += " countryid = " + countryid; sql += ", birthday = '" + twoDigits(birthyear) + "-" + twoDigits(birthmonth) + "-" + twoDigits(birthday) + "'"; sql += ", timezoneid = " + timezoneid; if (description != "") sql += ", description = '" + description + "'"; if (icq != "") sql += ", icq = '" + icq + "'"; sql += ", [public] = 1"; sql += ", gameinterest = " + gameinterest; sql += " WHERE id = " + Session("userid"); conn.Execute(sql); Response.Redirect("../default.asp"); %>