Web Wiz Forums - Will the ADMIN can ?

Print Page | Close Window

Will the ADMIN can ?

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=5554
Printed Date: 03 April 2026 at 12:25am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Will the ADMIN can ?

Posted By: zamalek
Subject: Will the ADMIN can ?
Date Posted: 05 September 2003 at 12:05pm

Hi all

I need to ask a very important question ,

Will the ADMIN be able to read the private messages for the members ?

If NO , Why he can NOT ?

If YES , How can I make him DOES NOT do that ?

THANKS.

Replies:

Posted By: michael
Date Posted: 05 September 2003 at 12:30pm

The admin cannot read private messages of other members unless he has access to the database to read them there.
Why he cannot? Because they are private messages and there should be no reson for him to do so.

-------------
http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker

Posted By: fastfred
Date Posted: 05 September 2003 at 2:44pm

Something like this makes it possible:

<% 'no security checking %>
<%
Response.expires = 0
Response.expiresabsolute = Now() - 1
Response.addHeader "pragma", "no-cache"
Response.addHeader "cache-control", "private"
Response.CacheControl = "no-cache"
%>

<%
response.buffer = true

'get key
key = request.querystring("key")
if key="" or isnull(key) then
key=request.form("key")
end if
if key="" or isnull(key) then response.redirect "tblPMMessagelist.asp"

'get action
a=request.form("a")
if a="" or isnull(a) then
a="I" 'display with input box
end if

' Open Connection to the database
set conn = Server.CreateObject("ADODB.Connection")
conn.Open xDb_Conn_Str

Select Case a
Case "I": ' Get a record to display

tkey = key
strsql = "SELECT * FROM [tblPMMessage] WHERE [PM_ID]=" & tkey

  set rs = Server.CreateObject("ADODB.Recordset")
  rs.Open strsql, conn
  If rs.EOF Then
   Response.Clear
   Response.Redirect "tblPMMessagelist.asp"
  Else
   rs.MoveFirst
  End If

  ' Get the field contents
  x_PM_ID = rs("PM_ID")
  x_Author_ID = rs("Author_ID")
  x_From_ID = rs("From_ID")
  x_PM_Tittle = rs("PM_Tittle")
  x_PM_Message = rs("PM_Message")
  x_PM_Message_Date = rs("PM_Message_Date")
  x_Read_Post = rs("Read_Post")
  x_Email_notify = rs("Email_notify")

rs.Close
Set rs = Nothing

End Select
%>

View TABLE : tbl PMMessage <a href="tblPMMessagelist.asp">Back to List</a>

<form>
<table border="0" cellspacing="1" cellpadding="5" bgcolor="#CCCCCC">
<tr>
<td bgcolor="#0099CC">PM ID </td>
<td bgcolor="#F5F5F5"><% response.write x_PM_ID %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">Author ID </td>
<td bgcolor="#F5F5F5"><% response.write x_Author_ID %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">From ID </td>
<td bgcolor="#F5F5F5"><% response.write x_From_ID %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">PM Tittle </td>
<td bgcolor="#F5F5F5"><% response.write x_PM_Tittle %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">PM Message </td>
<td bgcolor="#F5F5F5"><%= replace(x_PM_Message & "",chr(10)," ") %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">PM Message Date </td>
<td bgcolor="#F5F5F5"><% response.write x_PM_Message_Date %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">Read Post </td>
<td bgcolor="#F5F5F5"><% If x_Read_Post = True Then %><%= "Yes" %><% Else %><%= "No" %><% End If %> </td>
</tr>
<tr>
<td bgcolor="#0099CC">Email notify </td>
<td bgcolor="#F5F5F5"><% If x_Email_notify = True Then %><%= "Yes" %><% Else %><%= "No" %><% End If %> </td>
</tr>
</table>
</form>

Created this with aspmaker

-------------