chkadmin.asp

模块及功能： 1.汽车新闻 分类.查询.翻页 2.出售信息 搜索.评估.地区展示.发布.展示.固顶.刷新 3.求购信息 发布.展示.固顶.刷新 3.加盟商家管理 注册.登录.信

<!--#include file="conn.asp"-->
<!--#include file="../by2carmd5.asp"-->
<%
ServerName1=Cstr(Request.ServerVariables("HTTP_REFERER"))
ServerName2=Cstr(Request.ServerVariables("SERVER_NAME"))
If Mid(ServerName1,8,len(ServerName2))<>ServerName2 Then
    Response.Write "路径有误，禁止从网站外部提交表单！"
    response.end
End if
%>
<%
session.Timeout=100   '登陆超时时间(单位为分钟)
dim admin,password
admin=replace(trim(request("admin")),"'","")
password=by2carmd5(replace(trim(request("password")),"'",""))
passwordl=replace(trim(request("password")),"'","")

if request("verifycode")="" then
	response.write "<script LANGUAGE='javascript'>alert('请输入确认码！');history.go(-1);</script>"
	response.end
elseif session("verifycode")="" then
	response.write "<script LANGUAGE='javascript'>alert('请不要重复提交，如需重新登陆请返回登陆页面！');history.go(-1);</script>"
	response.end	
elseif session("verifycode")<>trim(request("verifycode")) then
	response.write "<script LANGUAGE='javascript'>alert('您输入的确认码有误，请重新输入！');history.go(-1);</script>"
	response.end
end if

set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from admin where admin='"&admin&"' and password='"&password&"' " ,conn,1,3
if not(rs.bof and rs.eof) then
if password=rs("password") then
session("admin")=trim(rs("admin"))
session("flag")=int(rs("flag"))
adminid=int(rs("adminid"))
rs("logins")=rs("logins")+1
rs.update
rs.Close
set rs=nothing


uerip=request.servervariables("HTTP_X_FORWARDED_FOR")
if userip="" then
uerip=Request.serverVariables("REMOTE_ADDR")
end if



set rs=server.CreateObject("adodb.recordset")
rs.open "select * from AdminLog" ,conn,1,3
rs.addnew
rs("adminid")=adminid
rs("ThisLogin")=logins+1
rs("datestart")=now()
rs("adminip")=uerip
rs.update
rs.close
set rs=nothing


response.Redirect "index.asp"
else

set rs=server.CreateObject("adodb.recordset")
rs.open "select * from loginerr" ,conn,1,3
uerip=request.servervariables("HTTP_X_FORWARDED_FOR")
if userip="" then
uerip=Request.serverVariables("REMOTE_ADDR")
end if
rs.addnew
rs("loginname")=admin
rs("loginpassword")=password
rs("ThisLogin")=logins+1
rs("logindate")=now()
rs("adminip")=uerip
rs.update
rs.close
set rs=nothing
response.Write "<script language=javascript>alert('登陆失败，你的信息已经被记录！');window.location.href='login.asp';</script>"
end if
else

set rs=server.CreateObject("adodb.recordset")
rs.open "select * from loginerr" ,conn,1,3
uerip=request.servervariables("HTTP_X_FORWARDED_FOR")
if userip="" then
uerip=Request.serverVariables("REMOTE_ADDR")
end if
rs.addnew
rs("loginname")=admin
rs("loginpassword")=passwordl
rs("ThisLogin")=rs("ThisLogin")+1
rs("logindate")=now()
rs("loginip")=uerip
rs.update
rs.close
set rs=nothing
response.Write "<script language=javascript>alert('登陆失败，你的信息已经被记录！');window.location.href='login.asp';</script>"
end if
%>