admin_login.asp

一个用asp.net编写的dns域名服务网站

<!--#include file="conn.asp" -->
<!--#include file="md5.asp" -->
<%
yzm=trim(request.form("yzm"))
if cstr(session("GetCode"))<>cstr(yzm) then
Response.redirect "admin.asp?w=2"
else
%>
<% 
 username=request("userid")
 password=request("password")
if Instr(username,"=")>0 or Instr(username,"%")>0 or Instr(username,chr(32))>0 or Instr(username,"?")>0 or Instr(username,"&")>0 or Instr(username,";")>0 or Instr(username,",")>0 or Instr(username,"'")>0 or Instr(username,",")>0 or Instr(username,chr(34))>0 or Instr(username,chr(9))>0 or Instr(username,"