密码验证.asp

他是一个asp+access的多用户留言板！

<!-- #include file="md5.asp" -->
 <!-- #include file="conn.asp" -->
<% 
function id2name(id)
set rs1 = server.CreateObject("ADODB.Recordset")  
rs1.open "SELECT * FROM NOIP选手 WHERE id=0" & id,conn ,3,1
if rs1.eof or rs1.bof then 
     id2name="客人" 
 
else
     id2name=rs1("姓名")
end if
rs1.close
set rs1=nothing
end function

function name2id(str)
set rs1 = server.CreateObject("ADODB.Recordset")  
rs1.open "SELECT * FROM NOIP选手 WHERE 姓名=" & """" & str & """",conn ,3,1
if rs1.eof or rs1.bof then 
     name2id=-1
 
else
     name2id=rs1("id")
end if
rs1.close
set rs1=nothing
end function


if Request.QueryString("ver")="1" then
Response.Write "您正在访问的是由加佳工作室开发的《加佳超级多用户留言板》。作者：吴佳君 [e-mail]"
Response.End
end if

classnum=Cint("0" & Request.QueryString("class") )

if classnum = 0 then classnum=1



set rs1 = server.CreateObject("ADODB.Recordset")  
rs1.open "SELECT * FROM 班级 WHERE id=" & classnum ,conn ,3,1

if rs1.EOF or rs1.BOF then Response.Status="404" :Response.End 
CLS_NAME = rs1("班名")
CLS_MASTER= rs1("班长")
CLS_URL= rs1("URL")
CLS_EMAIL= rs1("EMAIL")
CLS_LOGO= rs1("logo")
rs1.Close
set rs1 = nothing

'if   Request.Cookies("NOIPuser") =""  then  Response.Redirect "login.asp" :Response.end
'if   Request.Cookies("NOIPpass")="" then  Response.Redirect "login.asp" :Response.end

   if Request.Cookies("NOIPid") = "" then response.Cookies("NOIPid") = -1
   set rs = server.CreateObject("ADODB.Recordset")
   rs.open "SELECT * FROM NOIP选手 WHERE id=" & Request.Cookies("NOIPid"),conn ,3,1
 
 NOIPUserTit="访客"
 NOIPUserName="客人"
 NOIPUserID=-1
 

     if not rs.eof then  
       if not rs("MD5密码")<>md5(Request.Cookies("NOIPpass")) then
            NOIPUserName =rs("姓名")
            NOIPUserID=rs("id")
            NOIPUserTit=rs("头衔")
            if rs("短信") > 0 then msg=msg & "<a target='_blank' href='index.asp?url=MSGBox.asp'>您有<font color='#FF0000'>" & rs("短信") & "条</font>新短信。</a><br>"

       end if
     end if
     
     
       if msg <> "" then 
       
       %>

       <script>javascript:top.top.getMsg("&nbsp;您有新的消息","&nbsp;&nbsp;<%=msg%>" );</script>
    <% end if
    
 if CLS_MASTER = NOIPUserID and NOIPUserTit<> "管理员" then NOIPUserTit="班长"

      rs.close
   set rs=nothing
%>