checkadmin.asp

广告策划中心整站程序

<!--#include file="admin_conn.asp"-->
<%
	dim sql
	dim rs
	dim username
	dim password,verifycode
	username=replace(trim(request.form("username")),"'","")
	password=replace(trim(Request.form("password")),"'","")
	verifycode	=request.form("verifycode")
	if verifycode<>cstr(Session("verifycode")) then Response.Redirect "admin.asp"
	set rs=server.createobject("adodb.recordset")
	sql="select * from admin where password='"&password&"' and username='"&username&"'"
	rs.open sql,conn,1,1
 	if not(rs.bof and rs.eof) then
 		if password=rs("password") then
			session("admin")=rs("username")
			session("flag")=rs("flag")
			session("id")=rs("id")
                        Response.Redirect "admin.asp"
 		else
                Response.Redirect "admin.asp"
 		end if
	else	
                Response.Redirect "admin.asp"
	end if
        rs.close
	conn.close
	set rs=nothing
	set conn=nothing

%>