ckadmin.asp

天创商务网客户资源管理系统 v1,asp+Access,iis5

<!--#include file="conn.asp" -->
<!--#include file="md5.asp" -->
<%
	dim sql
	dim rs
	dim adminname
	dim adminpass
	adminname=replace(trim(request("name")),"'","")
	adminpass=replace(md5(trim(Request("pass"))),"'","")
        set rs=server.createobject("adodb.recordset")
	sql="select * from admin where adminpass='"&adminpass&"' and adminname='"&adminname&"'"

	rs.open sql,conn,1,1
 	if not(rs.bof and rs.eof) then
 		if adminpass=rs("adminpass") then
		session("fishinfire")=rs("adminname")
		Response.Redirect "manage.asp"
 		else
			call Error
 		end if
	else
		call Error()
	end if

	sub Error()
    	response.write "<script>alert(""用户名或密码错误，请检查！"");history.back();</script>"
	end sub
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing

%>