chk_log.asp

一个做得非常精美的进存销系统,可惜某些功能上做了限制．

<!--#include file="Conn.asp"-->
<!--#include file="Inc/MD5.asp"-->
<!--#include file="Inc/Char.asp"-->
<% 
Dim server_v1
Dim server_v2
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER")) 
server_v2=Cstr(Request.ServerVariables("SERVER_NAME")) 
if mid(server_v1,8,len(server_v2))<>server_v2 then 
response.write "<br><br><center><table border=0 cellpadding=20 width=450>" 
response.write "<tr><td>" 
response.write "不要外部提交,跳过Http提交吧!" 
response.write "</td></tr></table></center>" 
response.end 
end if 
%>
<%
Dim kname,passa,ino
Dim ip,k,levl
Dim lch,ch
Dim adminl,kuguanl,managel,cgjli,cwyuan,mjli
kname=killstr(Trim(Request.Form("name")))
passa=MD5(Request.Form("pass"))
ip = Request.ServerVariables("REMOTE_ADDR") 
k = now()

Set lch = Conn.execute("Select Admin,CaiWuYuan,ManJinLi,CaiGouJinLi,CaiGouYuan,KuGuan,Manage From [User_Levels]")
adminl = lch(0)
cwyuan = lch(1)
mjli = lch(2)
cgjli = lch(3)
kuguanl = lch(4)
managel = lch(5)
lch.Close
Set lch=Nothing

Set ch = Conn.Execute("Select * From [HQ_User] Where User_Name='"&kname&"' and PassWord = '"&passa&"'")
If ch.Eof and ch.Bof Then
    Response.write "<script language='javascript'>alert('密码或者用户错误!请返回!');" & chr(13)
    Response.write "window.document.location.href='Index.html';</script>"
Else
Set ino = Conn.execute("Update [HQ_User] Set LoginTime='"&k&"',IP = '"&ip&"' Where User_Name='"&kname&"'")
Session("ManageLevel") = ch("Levels")
Session("ManageName") = ch("User_Name")
Session("ManagePwd") = ch("PassWord")
End if

If Session("ManageName")<>kname or Session("ManagePwd")<>passa Then
Response.write "<script language='javascript'>alert('密码或者用户错误!请返回!');" & chr(13)
Response.write "window.document.location.href='Index.html';</script>"
Else
levl = Session("ManageLevel")
Conn.Execute("Insert Into LogNews(manage,manage_level,loginTime,outTime,ip) values('"&kname&"','"&levl&"','"&k&"','"&k&"','"&ip&"')")
Response.Redirect("Admin.html")
End if

ch.close
Set ch = nothing
ino.close
Set ino = nothing
Conn.Close
Set Conn=Nothing
%>