@using WebMatrix.Data; @{ var Login_dbo = Database.Open("login"); var MG_dbo = Database.Open("BestInt"); var login_message_resent = ""; var message = true; var activate_dev = "https://www.akimdevbox1.com/devapps/inthebestinterest/activate?activesession=yes"; var activate_prod = "https://www.inthebestinterest.com/activate"; var activate_url = ""; //Determine the server DEV or PROD environment for email message if (Request["HTTP_HOST"] == "www.akimdevbox1.com") {activate_url=activate_dev;} else {activate_url=activate_prod;} var account_new_proc = "DECLARE @Result INT; EXEC @Result = Proc_Login_Admin @Param_AccountName='"+@Request["email_1"]+"', @F_Name_Var='"+@Request["F_Name"]+"', @param_sys_answer='"+@Request["sys_answer"]+"', @param_user_answer='"+@Request["user_answer"]+"',@param_url='"+@activate_url+"', @L_Name_Var='"+@Request["L_Name"]+"',@Param_Action='NEW_ACCOUNT', @Param_Domain='www.inthebestinterest.com'"; } @* this logic will render a blank page in case an attacker submits injection code *@ @if (IsPost) { try { var account_new_exe = Login_dbo.QueryValue(account_new_proc); if(account_new_exe==0){ Response.Redirect("index?activate=Yes"); } } catch(Exception exception) { message = true;} }
Don't have an account? Create your own account, it takes less than a minute
Already have account? Sign In