user_manager.asp

xmuu.NET网址导航 V 3.3 正式版 直接修改后可使用。包括数百网址导航。

<!--#include file="conn.asp"-->
<%
Const sBASE_64_CHARACTERS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" 


Function Base64encode(asContents) 
Dim lnPosition 
Dim lsResult 
Dim Char1 
Dim Char2 
Dim Char3 
Dim Char4 
Dim Byte1 
Dim Byte2 
Dim Byte3 
Dim SaveBits1 
Dim SaveBits2 
Dim lsGroupBinary 
Dim lsGroup64 

If Len(asContents) Mod 3 > 0 Then asContents = asContents & String(3 - (Len(asContents) Mod 3), " ") 
lsResult = "" 

For lnPosition = 1 To Len(asContents) Step 3 
lsGroup64 = "" 
lsGroupBinary = Mid(asContents, lnPosition, 3) 

Byte1 = Asc(Mid(lsGroupBinary, 1, 1)): SaveBits1 = Byte1 And 3 
Byte2 = Asc(Mid(lsGroupBinary, 2, 1)): SaveBits2 = Byte2 And 15 
Byte3 = Asc(Mid(lsGroupBinary, 3, 1)) 

Char1 = Mid(sBASE_64_CHARACTERS, ((Byte1 And 252) \ 4) + 1, 1) 
Char2 = Mid(sBASE_64_CHARACTERS, (((Byte2 And 240) \ 16) Or (SaveBits1 * 16) And &HFF) + 1, 1) 
Char3 = Mid(sBASE_64_CHARACTERS, (((Byte3 And 192) \ 64) Or (SaveBits2 * 4) And &HFF) + 1, 1) 
Char4 = Mid(sBASE_64_CHARACTERS, (Byte3 And 63) + 1, 1) 
lsGroup64 = Char1 & Char2 & Char3 & Char4 

lsResult = lsResult + lsGroup64 
Next 

Base64encode = lsResult 
End Function


set rss=server.createobject("adodb.recordset")
sql="select * from admin where username='"&Session("Admin")&"'and password='"&Session("ap")&"'"
rss.open sql,conn,1,3
if rss.EOF then
	Response.Redirect "index.asp"
	Response.End 
end if
%>


<%
if Session("isAdmin")<>true Then
Response.Write "非法闯入！"
Response.End
End if
currentadmin=Session("Admin")
pw1=request("pw1")
pw2=request("pw2")
action=request("action")
if action="doit" then
if pw1="" or pw2="" or currentadmin="" then
	Response.Write "无法完成请求！"
	Response.End
end if
if pw1<>pw2 then
	Response.Write "两次输入的密码不一样！"
	Response.End
end if
set r=server.createobject("adodb.recordset")
r.open "select * from admin",conn,1,3
if not r.eof then
	r("password")=Base64encode(pw1)
	r.update
	Session("ap")=Base64encode(pw1)
	Response.Write "管理员密码已成功更改！"
	Response.End
else
	Response.Write "无法完成请求！"
	Response.End
end if
end if
%>


<form action="user_manager.asp" method="post">
<big><big>更改当前管理员密码：</big></big><br>
请输入新密码：<input type="password" name="pw1"><br>
请确认新密码：<input type="password" name="pw2"><br>
<input type="hidden" value="doit" name="action">
<input type="submit">
</form>