% ' 1/ check if logged in and bounce out if not If Session("GivCustomerID") = "" Or Session("UserID") = "" Then 'not logged in strBouncebackURL = "/asp/homepage.asp?error=NotLoggedIn&referral=www.online-supervision.net/asp/search.asp" response.redirect strBouncebackURL End If Set conn = Server.CreateObject("ADODB.Connection") conn.Open connstr ' 2/ load session variables with form data If request.form("FormSubmitted") = "yes" Then Session("SearchConditionsAuthorised") = request.form("SearchConditionsAuthorised") Session("SearchConditionsUserStatus") = request.form("SearchConditionsUserStatus") Session("SearchConditionsAllProfessions") = "" Session("SearchConditionsAllOrientations") = "" Session("includeResearchers") = request.form("includeResearchers") Else Session("SearchConditionsAuthorised") = request.querystring("Authorised") Session("SearchConditionsUserStatus") = request.querystring("UserStatus") Session("SearchConditionsAllProfessions") = "yes" Session("SearchConditionsAllOrientations") = "yes" End If ' 3/ set up various individual search conditions ' 3a/ search conditions for UserStatus and set up of 'all search conditions' If Session("SearchConditionsUserStatus") <> "" Then strAllSearchConditions = "UserStatus = '" & Session("SearchConditionsUserStatus") & "' " If Session("includeResearchers") <> "" Then strAllSearchConditions = "(" & strAllSearchConditions & "OR UserStatus = 'researching') " End If Else strAllSearchConditions = "(UserStatus = 'receiving' OR UserStatus = 'providing') " If Session("includeResearchers") <> "" Then strAllSearchConditions = "(UserStatus = 'receiving' OR UserStatus = 'providing' OR UserStatus = 'researching') " End If End If ' 3a/ search conditions for Authorised If Session("SearchConditionsAuthorised") <> "" Then strSearchConditionsAuthorised = "RegisterInterest.Authorised = '" & Session("SearchConditionsAuthorised") & "' " strAllSearchConditions = strAllSearchConditions & "AND " & strSearchConditionsAuthorised End If ' 3c/ search conditions for professions If Not Session("SearchConditionsAllProfessions") = "yes" Then strSQL = "SELECT ProfessionName FROM Professions" Set rs = conn.Execute(strSQL) do while not rs.eof Session(rs(0)) = request.form(rs(0)) If Session(rs(0)) <> "" Then strSearchConditionVarName = "Profession = '" & rs(0) & "' Or ProfessionName = '" & rs(0) & "' " If strSearchConditionsProfessions <> "" Then strSearchConditionsProfessions = strSearchConditionsProfessions & "OR " & strSearchConditionVarName Else strSearchConditionsProfessions = strSearchConditionVarName End If End If rs.movenext loop rs.Close ' Close recordset Set rs = nothing ' Remove recordset ' 3ciii/ if the resulting variable has any content, ' augment its value with a suitable prefix If strSearchConditionsProfessions <> "" Then strAllSearchConditions = strAllSearchConditions & "AND (" & strSearchConditionsProfessions & ") " End If End If ' 3d/ search conditions for orientations If Not Session("SearchConditionsAllOrientations") = "yes" Then strSQL = "SELECT OrientationName FROM Orientations" Set rs = conn.Execute(strSQL) do while not rs.eof Session(rs(0)) = request.form(rs(0)) ' Session("SearchConditionsAllOrientations") = request.form("SearchConditionsAllOrientations") If Session(rs(0)) <> "" Then strSearchConditionVarName = "Orientation = '" & rs(0) & "' Or OrientationName = '" & rs(0) & "' " If strSearchConditionsOrientations <> "" Then strSearchConditionsOrientations = strSearchConditionsOrientations & "OR " & strSearchConditionVarName Else strSearchConditionsOrientations = strSearchConditionVarName End If End If rs.movenext loop rs.Close ' Close recordset Set rs = nothing ' Remove recordset ' 3diii/ if the resulting variable has any content, ' augment its value with a suitable prefix If strSearchConditionsOrientations <> "" Then strAllSearchConditions = strAllSearchConditions & "AND (" & strSearchConditionsOrientations & ") " End If End If %>
|