login.php

CRM 不仅仅是一个管理名词和管理概念

<?
	include "include/db.inc.php";

	//
	if (!$user_name or !$pass_word) {
		echo "<script>alert('请填写用户名和密码！')</script>";
		echo "<script>javascript:window.history.back();</script>";
		exit;
	}
	
	$sql = "select * from $tbl_crm_user where username = '$user_name'";
	$res = mysql_query($sql);
	$row = @mysql_fetch_array($res);
	
	// 用户名正确？
	if (!$row[0]) {
		echo "<script>alert('用户名错误！')</script>";
		echo "<script>javascript:window.history.back();</script>";
		exit;
	}
	
	// 密码正确？
	$crypt=crypt($pass_word,$row[2]);
	if ($crypt != $row[2]) {
		echo "<script>alert('密码错误！')</script>";
		echo "<script>javascript:window.history.back();</script>";
		exit;
	}
	
	// setcookie
	$uid = $row[0];
	$username = $row[1];
	$password = $row[2];
	$name = $row[3];
	$departmentid = $row[4];
	$privilege = $row[5];
	
	$sql = "select * from department where departmentid = '$departmentid'";
	$res = mysql_query($sql);
	$row = mysql_fetch_array($res);
	$department = $row[1];
	
	setcookie("uid","$uid","0","/");
	setcookie("username","$username","0","/");
	setcookie("password","$password","0","/");

	setcookie("G_uid","$uid","0","/");
	setcookie("G_username","$username","0","/");
	setcookie("G_password","$password","0","/");

	setcookie("G_name","$name","0","/");
	setcookie("department","$department","0","/");
	setcookie("departmentid","$departmentid","0","/");
	setcookie("privilege","$privilege","0","/");

	
	print "<script>document.location='default.php';</script>";
?>