wapls_checklogin.asp

蓝色WAP建站系统,WAP源码,更多请登陆http://xywap.cn

<%
'==================================
'=文 件 名：wapls_checklogin.asp
'=适用版本：游戏天府WAP网站管理系统(CMS)V1.1
'=官方版权：http://www.gotf.cn
'=文件功能：后台登陆身份验证与退出信息
'=文件作者：游戏天府
'=发行时间：2007-02-01
'==================================
%>
<!--#include file="wapls_admin_conn.asp"-->
<!--#include file="wapls_md5.asp"-->
<%
dim adminname,adminpwd,GetCode,valicode,mastpaw
if request("action")="adminlogin" then
	call localsubmit()
	adminname=checksql("用户名",request.form("name"),1,16)
	adminpass=checksql("用户密码",request.form("pass"),1,12)
        adminpwd=md5(adminpass)
	if adminlogincode<>0 then
		GetCode=checksql("验证码",request.form("GetCode"),1,6)
		valicode=Session("yangzeng")
		if GetCode<>valicode then
			errmsg="验证码出错!"
			'记录登录情况
			sql="insert into wapls_log (login_name,logtime,log,login_ip) values ('"&adminname&"','"&now()&"','"&errmsg&"','"&Request.ServerVariables("REMOTE_ADDR")&"')"
			conn.execute(sql)
response.write "<script>window.alert('"&errmsg&"');window.location='javascript:history.go(-1);';</script>"

			response.end
		end if
	end if
	sql="select * from wapls_admin where admin_name='"&adminname&"'"
	set rs=server.createobject("adodb.recordset")
	rs.open sql,conn,1,3
	mastpaw=rs("admin_password")
	if rs.eof and rs.bof then
		rs.close
		set rs=nothing
		founderr=true
		errmsg="用户名出错!"
	elseif mastpaw<>adminpwd then
		rs.close
		set rs=nothing
		founderr=true
		errmsg="密码出错了!"
	elseif rs("login_flag")=1 and DateDiff("h",rs("last_time"),now())<1 and Request.ServerVariables("REMOTE_ADDR")<>rs("last_ip") then
		rs.close
		set rs=nothing
		founderr=true
		errmsg="此管理员已经登陆."
	else
		dim old_time,old_ip
		old_time=rs("last_time")
		old_ip=rs("last_ip")
		rs("last_time")=now()
		rs("login_flag")=1
		rs("last_ip")=Request.ServerVariables("REMOTE_ADDR")
		rs.update
		session("super_data")=adminname&"||"&rs("nickname")&"||"&rs("admin_super")&"||"&old_time&"||"&old_ip&"||"&rs("login_flag")&"||"&now()
		session("wapls_adminlogin")=wapls_sessionvar
		session.timeout=admintime
		rs.close
		set rs=nothing
		'记录登录情况
		sql="insert into wapls_log (login_name,logtime,log,login_ip) values ('"&adminname&"','"&now()&"','"&adminname&"登录成功','"&Request.ServerVariables("REMOTE_ADDR")&"')"
		conn.execute(sql)
		'判断初始用户是否使用默认用户名及密码，如是，就弹出对话框，要求及时更改用户名及登录密码
		if lcase(adminname)="admin" and trim(request.form("pass"))="admin" then
			Response.Write " <script> window.alert('请及时更改系统默认的用户名及密码！'); location.href='admin_admin.asp?action=editadmin&id=1';</script>"
			Response.End
		else
			response.Redirect "admin_index.asp"
		end if
	end if
	if founderr then
		'记录登录情况
		sql="insert into wapls_log (login_name,logtime,log,login_ip) values ('"&adminname&"','"&now()&"','<li>"&errmsg&"</li>','"&Request.ServerVariables("REMOTE_ADDR")&"')"
			conn.execute(sql)

response.write "<script>window.alert('"&errmsg&"');window.location='javascript:history.go(-1);';</script>"
		response.end
	end if
end if

if request("action")="logout" then
		dim outadminname
			outadminname=trim(left(replace(request.querystring("name"),"'",""),12))
		sql="select * from Ft_admin where admin_name='"&outadminname&"'"
		set rs=server.createobject("adodb.recordset")
		rs.open sql,conn,1,3
		if not rs.eof or not rs.bof then
			rs("login_flag")=0
			rs.update
			rs.close
			set rs=nothing
		else
			rs.close
			set rs=nothing
			errlog="程序出错，没有此管理员，请重新登录后正常退出！"
			response.write errlog
			'记录登录情况
			sql="insert into Ft_log (login_name,logtime,log,login_ip) values ('"&outadminname&"','"&now()&"','"&errlog&"','"&Request.ServerVariables("REMOTE_ADDR")&"')"
			conn.execute(sql)
			response.end
		end if
		'记录登录情况
		sql="insert into wapls_log (login_name,logtime,log,login_ip) values ('"&outadminname&"','"&now()&"','正常退出','"&Request.ServerVariables("REMOTE_ADDR")&"')"
		conn.execute(sql)
		session("feitec_adminlogin")=""
		session("super_data")=""
		Response.Write " <script> window.alert('"&outadminname&".感谢管理.下次再会!'); </script>"
		Response.Write"<script>setTimeout('self.close()',10)</script>"
		Response.End
end if
sub localsubmit()
	server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
	server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
	if mid(server_v1,8,len(server_v2))<>server_v2 then
		response.redirect("showerr.asp?errmsg=<br><li>禁止远程提交数据!")
		response.end
	end if
end sub
%>