pass.php

一个投票系统

<?
   include("const.php");
   $username=trim($HTTP_POST_VARS["names"]);
   $password=trim($HTTP_POST_VARS["password"]);
   $codes=trim($HTTP_POST_VARS["codes"]);
   if (empty($username) || empty($password) || empty($codes))
      {
	     echo "<script language='javascript'>alert('数据填写不完整');history.go(-1);</script>";
	     exit;
	  }
   if ($codes!=$HTTP_SESSION_VARS["logincode"])
      {
	     echo "<script language='javascript'>alert('验证码错误');history.go(-1);</script>";
	     exit;
      }
   link_data();
   $sql="select * from manage where id=1";
   $result=mysql_query($sql);
   $row=mysql_fetch_array($result);
   $names=stripslashes($row["names"]);
   $pass=stripslashes($row["pass"]);
   if ($username != $names)
   {
      echo "<script language='javascript'>alert('帐号错误');history.go(-1);</script>";
	  exit;
   }
   if (md5($password)!=$pass)
   {
      echo "<script language='javascript'>alert('密码错误');history.go(-1);</script>";
      exit;
   }
   session_register("admins");
   $admins="1";
   echo "<script language='javascript'>alert('登录成功！');window.location.href='manage.php';</script>";  
   close_data();
?>