everyinc.php

同学录的原程序

<?
    $username = $tool->checkVar($sessionName."username","s")?$tool->checkVar($sessionName."username","s"):$tool->checkVar($cookieName."username","c");
    $password = $tool->checkVar($sessionName."password","s")?$tool->checkVar($sessionName."password","s"):$tool->checkVar($cookieName."password","c");
	
		if($username != "")
		{
		  $db->query = "SELECT `id` FROM `".$prefix."mate_book` WHERE `logname`='".$username."' AND `mdpsw`='".$password."'";
			$db->query();
			if($db->num_rows() != 1)
			{			  
				$mes = '<font color="#FF0000">用户名/密码错误！</font><a href="log.php">点击这里重新登录</a>';
        $temp->showmes($mes);
				$db->close();
				exit();
			}
			if($username != $mate->config['administrator'])
			{
				$mes = '<font color="#FF0000">你不是管理员！</font><a href="../index.php">点击这里返回同学录首页</a>';
        $temp->showmes($mes);
				$db->close();
				exit();
			}
		}
		else
		{
				echo '<script language="JavaScript" type="text/javascript">window.location.href="log.php";</script>';
				exit();
		}
?>