Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - Will the ADMIN can ?
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Will the ADMIN can ?

 Post Reply Post Reply
Author
zamalek View Drop Down
Newbie
Newbie


Joined: 10 March 2003
Location: United States
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote zamalek Quote  Post ReplyReply Direct Link To This Post Topic: Will the ADMIN can ?
    Posted: 05 September 2003 at 12:05pm

Hi all

I need to ask a very important question ,

Will the ADMIN be able to read the private messages for the members ?

If NO , Why he can NOT ?

If YES , How can I make him DOES NOT do that ?

THANKS.

Back to Top
michael View Drop Down
Senior Member
Senior Member
Avatar

Joined: 08 April 2002
Location: United States
Status: Offline
Points: 4670
Post Options Post Options   Thanks (0) Thanks(0)   Quote michael Quote  Post ReplyReply Direct Link To This Post Posted: 05 September 2003 at 12:30pm
The admin cannot read private messages of other members unless he has access to the database to read them there.
Why he cannot? Because they are private messages and there should be no reson for him to do so.
Back to Top
fastfred View Drop Down
Groupie
Groupie


Joined: 10 December 2002
Location: Netherlands
Status: Offline
Points: 78
Post Options Post Options   Thanks (0) Thanks(0)   Quote fastfred Quote  Post ReplyReply Direct Link To This Post Posted: 05 September 2003 at 2:44pm

Something like this makes it possible:

 

<% 'no security checking %>
<%
Response.expires = 0
Response.expiresabsolute = Now() - 1
Response.addHeader "pragma", "no-cache"
Response.addHeader "cache-control", "private"
Response.CacheControl = "no-cache"
%>
<!--#include file="db.asp"-->

<%
response.buffer = true

'get key
key = request.querystring("key")
if key="" or isnull(key) then
 key=request.form("key")
end if
if key="" or isnull(key) then response.redirect "tblPMMessagelist.asp"

'get action
a=request.form("a")
if a="" or isnull(a) then
 a="I" 'display with input box
end if

' Open Connection to the database
set conn = Server.CreateObject("ADODB.Connection")
conn.Open xDb_Conn_Str

Select Case a
 Case "I": ' Get a record to display

  tkey = key
  strsql = "SELECT * FROM [tblPMMessage] WHERE [PM_ID]=" & tkey

  set rs = Server.CreateObject("ADODB.Recordset")
  rs.Open strsql, conn
  If rs.EOF Then
   Response.Clear
   Response.Redirect "tblPMMessagelist.asp"
  Else
   rs.MoveFirst
  End If

  ' Get the field contents
  x_PM_ID = rs("PM_ID")
  x_Author_ID = rs("Author_ID")
  x_From_ID = rs("From_ID")
  x_PM_Tittle = rs("PM_Tittle")
  x_PM_Message = rs("PM_Message")
  x_PM_Message_Date = rs("PM_Message_Date")
  x_Read_Post = rs("Read_Post")
  x_Email_notify = rs("Email_notify")

  rs.Close
  Set rs = Nothing

End Select
%>

<!--#include file="header.asp"-->

<p><font size="-1">View TABLE : tbl PMMessage<br><br><a href="tblPMMessagelist.asp">Back to List</a></font></p>

<p>
<form>
<table border="0" cellspacing="1" cellpadding="5" bgcolor="#CCCCCC">
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">PM ID</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% response.write x_PM_ID %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">Author ID</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% response.write x_Author_ID %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">From ID</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% response.write x_From_ID %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">PM Tittle</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% response.write x_PM_Tittle %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">PM Message</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><%= replace(x_PM_Message & "",chr(10),"<br>") %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">PM Message Date</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% response.write x_PM_Message_Date %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">Read Post</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% If x_Read_Post = True Then %><%= "Yes" %><% Else %><%= "No" %><% End If %></font>&nbsp;</td>
</tr>
<tr>
<td bgcolor="#0099CC"><font color="#FFFFFF"><font size="-1">Email notify</font>&nbsp;</font></td>
<td bgcolor="#F5F5F5"><font size="-1"><% If x_Email_notify = True Then %><%= "Yes" %><% Else %><%= "No" %><% End If %></font>&nbsp;</td>
</tr>
</table>
</form>
<p>

<!--#include file="footer.asp"-->

Created this with aspmaker

   
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.