<%@LANGUAGE="VBSCRIPT"%>
<!--#include file="../../Connections/connAURNDB.asp" -->
<%
'____________________________________________________________________________________________________
'Pass in the submitted content to filter
Function RemoveHTML( strText )
    Dim TAGLIST
    TAGLIST = ";!--;!DOCTYPE;A;ACRONYM;ADDRESS;APPLET;AREA;B;BASE;BASEFONT;" &_
              "BGSOUND;BIG;BLOCKQUOTE;BODY;BR;BUTTON;CAPTION;CENTER;CITE;CODE;" &_
              "COL;COLGROUP;COMMENT;DD;DEL;DFN;DIR;DIV;DL;DT;EM;EMBED;FIELDSET;" &_
              "FONT;FORM;FRAME;FRAMESET;HEAD;H1;H2;H3;H4;H5;H6;HR;HTML;I;IFRAME;IMG;" &_
              "INPUT;INS;ISINDEX;KBD;LABEL;LAYER;LAGEND;LI;LINK;LISTING;MAP;MARQUEE;" &_
              "MENU;META;NOBR;NOFRAMES;NOSCRIPT;OBJECT;OL;OPTION;P;PARAM;PLAINTEXT;" &_
              "PRE;Q;S;SAMP;SCRIPT;SELECT;SMALL;SPAN;STRIKE;STRONG;STYLE;SUB;SUP;" &_
              "TABLE;TBODY;TD;TEXTAREA;TFOOT;TH;THEAD;TITLE;TR;TT;U;UL;VAR;WBR;XMP;XML;"

    Const BLOCKTAGLIST = ";APPLET;EMBED;FRAMESET;HEAD;NOFRAMES;NOSCRIPT;OBJECT;SCRIPT;STYLE;XML;"
    
    Dim nPos1
    Dim nPos2
    Dim nPos3
    Dim strResult
    Dim strTagName
    Dim bRemove
    Dim bSearchForBlock
    
    nPos1 = InStr(strText, "<")
    Do While nPos1 > 0
        nPos2 = InStr(nPos1 + 1, strText, ">")
        If nPos2 > 0 Then
            strTagName = Mid(strText, nPos1 + 1, nPos2 - nPos1 - 1)
	    strTagName = Replace(Replace(strTagName, vbCr, " "), vbLf, " ")

            nPos3 = InStr(strTagName, " ")
            If nPos3 > 0 Then
                strTagName = Left(strTagName, nPos3 - 1)
            End If
            
            If Left(strTagName, 1) = "/" Then
                strTagName = Mid(strTagName, 2)
                bSearchForBlock = False
            Else
                bSearchForBlock = True
            End If
            
            If InStr(1, TAGLIST, ";" & strTagName & ";", vbTextCompare) > 0 Then
                bRemove = True
                If bSearchForBlock Then
                    If InStr(1, BLOCKTAGLIST, ";" & strTagName & ";", vbTextCompare) > 0 Then
                        nPos2 = Len(strText)
                        nPos3 = InStr(nPos1 + 1, strText, "</" & strTagName, vbTextCompare)
                        If nPos3 > 0 Then
                            nPos3 = InStr(nPos3 + 1, strText, ">")
                        End If
                        
                        If nPos3 > 0 Then
                            nPos2 = nPos3
                        End If
                    End If
                End If
            Else
                bRemove = False
            End If
            
            If bRemove Then
                strResult = strResult & Left(strText, nPos1 - 1)
                strText = Mid(strText, nPos2 + 1)
            Else
                strResult = strResult & Left(strText, nPos1)
                strText = Mid(strText, nPos1 + 1)
            End If
        Else
            strResult = strResult & strText
            strText = ""
        End If
        
        nPos1 = InStr(strText, "<")
    Loop
    strResult = strResult & strText
    
    RemoveHTML = strResult
End Function
%>
<%
'Determine whether page has been posted to or not
Dim blnPost
If Ucase(Request.ServerVariables("REQUEST_METHOD")) = "POST" Then
	blnPost = True
End If
%>
<%
'** Atempt to save content to DB
If (blnPost) Then 
'**Capture the data, strip blocked characters then save it to DB **
'Read posted data and replace single quotes to prevent db errors
	strFirstName = Replace(Request.Form("FirstName"), "'", "''")
	strLastName	= Replace(Request.Form("LastName"), "'", "''")
	strAddressLine1 = Replace(Request.Form("AddressLine1"), "'", "''")
	strAddressLine2 = Replace(Request.Form("AddressLine2"), "'", "''")
	strCity = Replace(Request.Form("City"), "'", "''")
	strState = Replace(Request.Form("State"), "'", "''")
	strZip = Replace(Request.Form("Zip"), "'", "''")
	strPhone = Replace(Request.Form("Phone"), "'", "''")
	strAge = Replace(Request.Form("Age"), "'", "''")
	strEmail = Replace(Request.Form("Email"), "'", "''")
	stremailFormat = Replace(Request.Form("emailFormat"), "'", "''")
	IPAddress = Replace(Request.Form("IPAddress"), "'", "''")
	
	'Clean up posted content - remove all blocked html tags
	strFirstName = RemoveHTML(strFirstName)
	strLastName = RemoveHTML(strLastName)
	strAddressLine1 = RemoveHTML(strAddressLine1)
	strAddressLine2 = RemoveHTML(strAddressLine2)
	strCity = RemoveHTML(strCity)
	strState = RemoveHTML(strState)
	strZip = RemoveHTML(strZip)
	strPhone = RemoveHTML(strPhone)
	strAge = RemoveHTML(strAge)
	strEmail = RemoveHTML(strEmail)
	stremailFormat = RemoveHTML(stremailFormat)
	IPAddress = RemoveHTML(IPAddress)
	

	'Check to see if this is a duplicate entry
	MM_flag="MM_insert"
		If (CStr(Request(MM_flag)) <> "") Then
  			MM_dupKeyRedirect="duplicate.asp"
  			'MM_rsKeyConnection=MM_connAURNDB_STRING
  			'MM_dupKeyUsernameValue = CStr(Request.Form("Email"))
  			'MM_dupKeyUserLnameValue = CStr(Request.Form("LastName"))
  			'MM_dupKeySQL="SELECT Email, LastName FROM dbo.contestCountryTime WHERE Email='" & MM_dupKeyUsernameValue & "' AND LastName='" & MM_dupKeyUserLnameValue & "'"
  			'MM_adodbRecordset="ADODB.Recordset"
  			'set MM_rsKey=Server.CreateObject(MM_adodbRecordset)
  			'MM_rsKey.ActiveConnection=MM_rsKeyConnection
  			'MM_rsKey.Source=MM_dupKeySQL
  			'MM_rsKey.CursorType=0
  			'MM_rsKey.CursorLocation=2
  			'MM_rsKey.LockType=3
  			'MM_rsKey.Open

			Set objConn = Server.CreateObject("ADODB.Connection")
			objConn.ConnectionString = MM_connAURNDB_STRING
			objConn.CursorLocation = 3
			objConn.Open()

			Set objCmd = Server.CreateObject("ADODB.Command")
			Set objCmd.ActiveConnection = objConn
			objCmd.CommandType = 1
			objCmd.CommandText = "SELECT Email, LastName FROM dbo.contestCountryTime09 WHERE Email=? AND LastName=?"
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = CStr(Request.Form("Email"))
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = CStr(Request.Form("LastName"))
			objCmd.Parameters.Append( objParam )
			
			Set MM_rsKey = objCmd.Execute

  			If Not MM_rsKey.EOF Or Not MM_rsKey.BOF Then 
    		' the username was found - can not add the requested username
    			MM_qsChar = "?"
    			If (InStr(1,MM_dupKeyRedirect,"?") >= 1) Then MM_qsChar = "&"
    			'MM_dupKeyRedirect = MM_dupKeyRedirect & MM_qsChar & "requsername=" & MM_dupKeyUsernameValue
    			Response.Redirect(MM_dupKeyRedirect)
  				End If
  			MM_rsKey.Close
		End If
	
	'Construct the insert string
	 'strSQL = "INSERT INTO dbo.contestCountryTime (FirstName, LastName, AddressLine1, AddressLine2, City, State, " & _
     '	"Zip, Phone, Age, Email, emailFormat, IPAddress) VALUES ('" & strFirstName & "', '" & strLastName & "', '" & _
   	'	strAddressLine1 & "', '" & strAddressLine2 & "', '" & strCity & "', '" & strState & "', '" & strZip & "', '" &_
	'	 strPhone & "', '" & strAge & "', '" & strEmail & "', '" & stremailFormat & "', '" & IPAddress & "')"
	
	'If all is well, add to database
	'Set Conn = Server.CreateObject("ADODB.Command")
	'Conn.ActiveConnection = MM_connAURNDB_STRING
	'Conn.CommandText = strSQL
	'Conn.Execute
	'Conn.ActiveConnection.Close

			Set objConn = Server.CreateObject("ADODB.Connection")
			objConn.ConnectionString = MM_connAURNDB_STRING
			objConn.CursorLocation = 3
			objConn.Open()

			Set objCmd = Server.CreateObject("ADODB.Command")
			Set objCmd.ActiveConnection = objConn
			objCmd.CommandType = 1
			objCmd.CommandText = "INSERT INTO dbo.contestCountryTime09 (" &_
				"FirstName, LastName, AddressLine1, AddressLine2, City, State, Zip, Phone, Age, Email, emailFormat, IPAddress)" &_
     			"VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
			
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strFirstName
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strLastName
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strAddressLine1
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strAddressLine2
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strCity
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strState
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strZip
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strPhone
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value =strAge
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = strEmail
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = stremailFormat
			objCmd.Parameters.Append( objParam )
			Set objParam = objCmd.CreateParameter("@param", adVarChar, adParamInput, 250)
			objParam.value = IPAddress
			objCmd.Parameters.Append( objParam )
			
			Set MM_rsKey = objCmd.Execute


	' Send to Thank You page
	Response.Redirect "thank-you.asp"
End If
%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Quench Your Thirst Sweepstakes</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
	<link rel="stylesheet" href="countrytime09.css" type="text/css">
	<script language="JAVASCRIPT" SRC="/aurn.js"></script>
	<script language="JavaScript" type="text/JavaScript">
<!--
function YY_checkform() { //v4.71
//copyright (c)1998,2002 Yaromat.com
  var a=YY_checkform.arguments,oo=true,v='',s='',err=false,r,o,at,o1,t,i,j,ma,rx,cd,cm,cy,dte,at;
  for (i=1; i<a.length;i=i+4){
    if (a[i+1].charAt(0)=='#'){r=true; a[i+1]=a[i+1].substring(1);}else{r=false}
    o=MM_findObj(a[i].replace(/\[\d+\]/ig,""));
    o1=MM_findObj(a[i+1].replace(/\[\d+\]/ig,""));
    v=o.value;t=a[i+2];
    if (o.type=='text'||o.type=='password'||o.type=='hidden'){
      if (r&&v.length==0){err=true}
      if (v.length>0)
      if (t==1){ //fromto
        ma=a[i+1].split('_');if(isNaN(v)||v<ma[0]/1||v > ma[1]/1){err=true}
      } else if (t==2){
        rx=new RegExp("^[\\w\.=-]+@[\\w\\.-]+\\.[a-zA-Z]{2,4}$");if(!rx.test(v))err=true;
      } else if (t==3){ // date
        ma=a[i+1].split("#");at=v.match(ma[0]);
        if(at){
          cd=(at[ma[1]])?at[ma[1]]:1;cm=at[ma[2]]-1;cy=at[ma[3]];
          dte=new Date(cy,cm,cd);
          if(dte.getFullYear()!=cy||dte.getDate()!=cd||dte.getMonth()!=cm){err=true};
        }else{err=true}
      } else if (t==4){ // time
        ma=a[i+1].split("#");at=v.match(ma[0]);if(!at){err=true}
      } else if (t==5){ // check this 2
            if(o1.length)o1=o1[a[i+1].replace(/(.*\[)|(\].*)/ig,"")];
            if(!o1.checked){err=true}
      } else if (t==6){ // the same
            if(v!=MM_findObj(a[i+1]).value){err=true}
      }
    } else
    if (!o.type&&o.length>0&&o[0].type=='radio'){
          at = a[i].match(/(.*)\[(\d+)\].*/i);
          o2=(o.length>1)?o[at[2]]:o;
      if (t==1&&o2&&o2.checked&&o1&&o1.value.length/1==0){err=true}
      if (t==2){
        oo=false;
        for(j=0;j<o.length;j++){oo=oo||o[j].checked}
        if(!oo){s+='* '+a[i+3]+'\n'}
      }
    } else if (o.type=='checkbox'){
      if((t==1&&o.checked==false)||(t==2&&o.checked&&o1&&o1.value.length/1==0)){err=true}
    } else if (o.type=='select-one'||o.type=='select-multiple'){
      if(t==1&&o.selectedIndex/1==0){err=true}
    }else if (o.type=='textarea'){
      if(v.length<a[i+1]){err=true}
    }
    if (err){s+='* '+a[i+3]+'\n'; err=false}
  }
  if (s!=''){alert('The required information is incomplete or contains errors:\t\t\t\t\t\n\n'+s)}
  document.MM_returnValue = (s=='');
}
//-->
</script>
</head>

<body style="margin: 0px; background-color: #EEEFD0;">
<!-- NAV -->
<!--#include file="nav.htm" -->
<!-- /NAV -->
<table cellpadding=0 cellspacing=0 border=0 width=901 height="100%" align=center>
<tr>
<td valign=top align=left class="bg">

<!-- CONTENT -->
<table cellpadding=0 cellspacing=0 border=0>
	<tr>
		  <td valign=top align=center width=128>
<!-- LEFT -->
<!--#include file="left.htm" -->
	<!-- /LEFT --></td>
		  <td valign=top align=left width=514 style="background-color: #EEEFD0;"> 
            <img src="images/top.jpg" alt="Quench Your Thirst Sweepstakes" title="Quench Your Thirst Sweepstakes" vspace=0 hspace=0 width=514 height=316> 
            <!-- CONTENT -->
            <div style="padding: 20px;">
			<p align=center><img src="images/hdr_enter-and-win.jpg" alt="enter and win!" title="enter and win!" vspace=0 hspace=0 border=0 width=276 height=52></p>
			 
<table cellpadding=5 cellspacing=0 border=0>
			<tr>
			      <td valign=top align=left> <img src="images/country-time-product.jpg" alt="Country Time" title="Country Time" vspace=0 hspace=0 border=0 width=73 height=105></td>
			<td valign=top align=left>
	Summertime is the time for Country Time, so AURN and Country Time have teamed up to give two lucky winners a summer barbeque prize package including $100 worth of Country Time Lemonade!
			
<form action="enter.asp" method="POST" name="form1" onSubmit="YY_checkform('form1','FirstName','#q','0','\'First Name\' is required.','LastName','#q','0','\'Last Name\' is required.','AddressLine1','#q','0','\'Address\' is required.','Email','#S','2','\'Email\' is required and must be a valid address.','City','#q','0','\'City\' is required.','reTypeEmail','#Email','6','Email addresses do not match.','State','#q','1','\'State\' is required.');return document.MM_returnValue">

	<input type="hidden" name="IPAddress" value="<%=Request.ServerVariables("REMOTE_ADDR")%>">
                    <table width="333" border=0 cellpadding=0 cellspacing=5>
<tr>
<td align="left" colspan="2" valign="top">
</td>
</tr>
                <tr> 
                  <td valign="top" align="left" colspan="4" class="padding"><span style="font-weight:bold;">Your 
                    Information</span></td>
                </tr>
                <tr> 
                  <td valign="top" align="left" colspan="4" class="padding"><span class="font-size:11px;"><em>Note: 
                    * indicates required fields</em></span><br><br></td>
                </tr>
			<tr> 
                  <td width="145" align="right" valign="top">*First Name:</td>
                  <td width="173" align="left" valign="top" class="padding2">
<input name="FirstName" type="text" size="20" tabindex="1"></tr>
                <tr> 
                  <td valign="top" align="right">*Last Name:</td>
                  <td valign="top" align="left" class="padding2"><input name="LastName" type="text" size="20" tabindex="2"></td></tr>
				
                <tr> 
                  <td valign="top" align="right">*Address 1:</td>
                  <td valign="top" align="left" class="padding2">
<input type="text" name="AddressLine1" size="20" tabindex="3"></tr>
                <tr> 
                        <td height="24" align="right" valign="top">Address 2:</td>
                  <td valign="top" align="left" class="padding2"> <input type="text" name="AddressLine2" size="20" tabindex="4"></td></tr>
                <tr> 
                  <td valign="top" align="right">*City:</td>
                  <td valign="top" align="left" class="padding2"> <input type="text" name="City" size="20" tabindex="5"></td></tr>      <tr> 
                  <td valign="top" align="right">*State/Province:</td>
                  <td valign="top" align="left" class="padding2"> <SELECT name="State" tabindex="6">
                      <OPTION selected>State</OPTION>
                      <OPTION value=AL>Alabama 
                      <OPTION value=AZ>Arizona 
                      <OPTION value=AR>Arkansas 
                      <OPTION value=CA>California 
                      <OPTION value=CO>Colorado 
                      <OPTION value=CT>Connecticut 
                      <OPTION value=DE>Delaware 
                      <OPTION value=DC>District of Columbia 
                      <OPTION value=FL>Florida 
                      <OPTION value=GA>Georgia 
                      <OPTION value=ID>Idaho 
                      <OPTION value=IL>Illinois 
                      <OPTION value=IN>Indiana 
                      <OPTION value=IA>Iowa 
                      <OPTION value=KS>Kansas 
                      <OPTION value=KY>Kentucky 
                      <OPTION value=LA>Louisiana 
                      <OPTION value=ME>Maine 
                      <OPTION value=MD>Maryland 
                      <OPTION value=MA>Massachusetts 
                      <OPTION value=MI>Michigan 
                      <OPTION value=MN>Minnesota 
                      <OPTION value=MS>Mississippi 
                      <OPTION value=MO>Missouri 
                      <OPTION value=MT>Montana 
                      <OPTION value=NE>Nebraska 
                      <OPTION value=NV>Nevada 
                      <OPTION value=NH>New Hampshire 
                      <OPTION value=NJ>New Jersey 
                      <OPTION value=NM>New Mexico 
                      <OPTION value=NY>New York 
                      <OPTION value=NC>North Carolina 
                      <OPTION value=ND>North Dakota 
                      <OPTION value=OH>Ohio 
                      <OPTION value=OK>Oklahoma 
                      <OPTION value=OR>Oregon 
                      <OPTION value=PA>Pennsylvania 
                      <OPTION value=RI>Rhode Island 
                      <OPTION value=SC>South Carolina 
                      <OPTION value=SD>South Dakota 
                      <OPTION value=TN>Tennessee 
                      <OPTION value=TX>Texas 
                      <OPTION value=UT>Utah 
                      <OPTION value=VA>Virginia 
                      <OPTION value=WA>Washington 
                      <OPTION value=WV>West Virginia 
                      <OPTION value=WI>Wisconsin 
                      <OPTION value=WY>Wyoming </SELECT> </td></tr>
				  <tr>
                  <td valign="top" align="right" class="padding2">Zip: </td>
                  <td valign="top" align="left" class="padding2"> <input type="text" name="Zip" size="20" tabindex="7"></td>
                </tr>
				<tr>
                  <td valign="top" align="right"> <p>Age: </td>
                  <td valign="top" align="left" class="padding2"><input type="text" name="Age" size="20" tabindex="9"> 
                  </td>
                </tr>
				  <tr>
                  <td valign="top" align="right"> <p>Phone: </td>
                  <td valign="top" align="left" class="padding2"><input type="text" name="Phone" size="20" tabindex="8"> 
                  </td>
                </tr>
				<tr>
                  <td valign="top" align="right"><p>*Email:</td>
                        <td valign="top" align="left" class="padding2"> <input type="text" name="Email" size="20" tabindex="10"></td>
                </tr><tr>
                  <td valign="top" align="right"> <P>*Re-type E-mail: </td>
                        <td valign="top" align="left" class="padding2"><input name="reTypeEmail" type="text" size="20" maxlength="70" tabindex="11"> 
                        </td>
                </tr>
          <tr>
                  <td valign="top" align="right">Email Format: </td>
                  <td valign="top" align="left" class="padding2" colspan="3"> 
                    <input type="radio" name="emailFormat" value="HTML" checked tabindex="12">
                    HTML &nbsp; <input type="radio" name="emailFormat" value="TEXT">
                    TEXT<br> <input type="radio" name="emailFormat" value="AOL">
                    AOL &nbsp;&nbsp;&nbsp;&nbsp; <input type="radio" name="emailFormat" value="MIME">
                    MIME </td>
                </tr>
                <tr> 
                  <td valign="top" align="center" colspan="4"><br> 
                    <!-- <br><br><input type="reset" name="Reset" value="Clear Form">
               &nbsp;&nbsp; -->
                    <input type="submit" name="Submit" value="Submit" tabindex="22"> 
                  </td></tr>
</table>
<input type="hidden" name="MM_insert" value="form1">
            </form>
			
			</td></tr></table>
			</div>
			<!-- /CONTENT -->
          </td>
		<td valign=top align=center width=258>
	<!-- RIGHT -->
<!--#include file="right.htm" -->
	<!-- /RIGHT -->

	</td>
					
	</tr></table>

<!-- /CONTENT -->

</td> 
</tr></table>
<!-- /NAV -->

</body>
</html>