📄 login.asp
字号:
<%@language="VBScript" codepage="936"%>
<!--#include file="inc/function.asp"-->
<!--#include file="inc/conn.asp"-->
<!--#include file="inc/md5.asp"-->
<%
'-----------------
if session("goindex") then
response.redirect("index.asp")
end if
'-----------------
if session("adminlogin")<>"" then
title="管理员管理"
else
title="请登录"
end if
%>
<html>
<head>
<title><%=title%>--<%=name%>--[By BrightStar]</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<Meta Name="description" Content="BS在线文件管理系统">
<Meta Name="Keywords" Content="BS在线文件管理系统">
<meta http-equiv="pragma" content="no-cache">
<link href="styles.css" rel="stylesheet" type="text/css">
<script language="JavaScript" src="inc/md5.js"></script>
<SCRIPT LANGUAGE=JAVASCRIPT>
<!--
if (top.location !== self.location) {
top.location=self.location;
}
//-->
</SCRIPT>
<script language="javascript">
<!--
function adminlogin(action){
switch (action){
case "login" :
{obj=document.login;
obj.action="chk.asp?type="+action;
if(obj.admin.value.length<5)
{alert("管理员不可为空也不能少于5个字符!");return false;}
if(obj.pwd.value.length<5)
{alert("密码不可为空也不能少于5个字符!");return false;}
else
pwdvalue=md5(md5(obj.pwd.value)+md5(obj.chk.value));
if(obj.chk.value.length!=4)
{alert("请填写正确的验证码!");return false;}
openWindow("chk.asp?type=login&admin="+obj.admin.value+"&pwd="+pwdvalue+"&chk="+obj.chk.value);
return false;}
break;//---------
case "adminlogin" :
{obj=document.login;
obj.action="chk.asp?type=login&goindex=1";
if(obj.admin.value.length<5)
{alert("管理员不可为空也不能少于5个字符!");return false;}
if(obj.pwd.value.length<5)
{alert("密码不可为空也不能少于5个字符!");return false;}
else
pwdvalue=md5(md5(obj.pwd.value)+md5(obj.chk.value));
if(obj.chk.value.length!=4)
{alert("请填写正确的验证码!");return false;}
openWindow("chk.asp?type=login&admin="+obj.admin.value+"&pwd="+pwdvalue+"&chk="+obj.chk.value+"&goindex=1");
return false;}
break;//---------
<%
if session("adminlogin") <> "" then
set rs=CreateObject("ADODB.Recordset")
if session("admin") then
rs.open "select * from admin", conn,3,3
else
rs.open "select * from admin where admin='"&session("adminlogin")&"'", conn,3,3
end if
if not rs.eof then
i = 1
while not rs.eof
%>
case "gotoupdate<%=i%>" :
{var super<%=i%>=0;
obj=document.gotoupdate<%=i%>;
<% if session("admin") then %>
if(obj.super_v.checked) super<%=i%>=1;else super<%=i%>=0;
<% end if %>
obj.action="chk.asp?type=modify&super1="+super<%=i%>;
if(obj.admin.value.length<5)
{alert("管理员不可为空也不能少于5个字符!");return false;}
if(!obj.pwd.value)
{if(!confirm("不修改密码吗?"))return false;}
if(obj.pwd.value&&obj.pwd.value.length<5)
{alert("密码长度应大于5个字符!");return false;}
else
if(obj.pwd.value) pwdvalue=md5(obj.pwd.value); else pwdvalue="";
if(!obj.dir.value||obj.dir.value.length<2)
{alert("请设置权限目录!");return false;}
openWindow(obj.action+"&admin="+obj.admin.value+"&pwd="+pwdvalue+"&dir="+obj.dir.value+"&exten="+obj.exten.value);
return false;}
break;//---------
<% rs.movenext
i = i + 1
wend
end if
rs.close()
set rs=nothing
end if
%>
<% if session("adminlogin") <> "" then %>
case "addordel" :
{var super1
obj=document.addordel;
obj.action="chk.asp?type="+obj.aord_v.value;
if(!obj.aord_v.value)
{alert("请选择操作!");return false;}
if(obj.admin.value.length<5)
{alert("管理员不可为空也不能少于5个字符!");return false;}
if(obj.pwd.value.length<5)
{alert("密码不可为空也不能少于5个字符!");return false;}
else
pwdvalue=md5(obj.pwd.value);
if(obj.aord_v.value=="add")
{ if(!obj.dir.value||obj.dir.value.length<2)
{alert("请设置权限目录!");return false;}
if(obj.super_v.checked) super1=1;else super1=0;
alert("请牢记密码:"+obj.pwd.value);
obj.action=obj.action+"&super1="+super1;
openWindow(obj.action+"&admin="+obj.admin.value+"&pwd="+pwdvalue+"&dir="+obj.dir.value+"&exten="+obj.exten.value);
return false;}
else
{
openWindow(obj.action+"&admin="+obj.admin.value+"&pwd="+pwdvalue+"&dir="+obj.dir.value);
return false;}}
break;//---------
<% end if %>
}//end switch
}//end function
//------End Function
function openWindow(theURL) { //v2.0
window.open(theURL,'','toolbar=no,location=no,status=no,menubar=no,scrollbars=no,resizable=no,width=280,height=150');
}
//-->
</script>
</head>
<body leftmargin="0" topmargin="0">
<br>
<% if session("adminlogin")="" then %>
<br>
<table width="390" align="center" cellpadding="2" cellspacing="0" class="table" style="border: 1 solid #000000">
<form action="chk.asp" method="post" name="login" onsubmit="return adminlogin('login')" >
<tr>
<td colspan="2" align="center" bgcolor="#CCCCCC" style="font: 10.5pt;border-bottom: 1 solid #000000;">请登录</td>
</tr>
<tr bgcolor="#eeeeee">
<td height="5" colspan="2"></td>
</tr>
<tr bgcolor="#eeeeee">
<td width="100" align="center"> </td>
<td width="290">管理员:
<input name="admin" type="text" id="admin" value="<%=session("theName")%>" size="15">
</td>
</tr>
<tr bgcolor="#eeeeee">
<td align="center"> </td>
<td>密 码:
<input name="pwd" type="password" id="pwd" value="" size="15">
</td>
</tr>
<tr bgcolor="#eeeeee">
<td align="center"> </td>
<td>验证码:
<input name="chk" type="text" id="chk" size="7" maxlength="4">
<img src="inc/NumCode.asp"></td>
</tr>
<tr bgcolor="#eeeeee">
<td height="5" colspan="2"></td>
</tr>
<tr bgcolor="#CfCfCf">
<td align="center" style="border-top: 1 solid #000000"> </td>
<td style="border-top: 1 solid #000000"> <input class="button" type="submit" name="Submit" value="登录系统">
<input onclick="javascript:adminlogin('adminlogin');" class="button" type="button" name="Submit2" value="文件管理">
</td>
</tr>
</form>
</table>
<% else %>
<%
set rs=CreateObject("ADODB.Recordset")
if session("admin") then
rs.open "select * from admin where admin ='"&session("adminlogin")&"' or super=false order by date_add desc", conn,3,3
else
rs.open "select * from admin where admin='"&session("adminlogin")&"' order by date_add desc", conn,3,3
end if
if not rs.eof then
%>
<table width="758" height="20" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td style="border: 1 solid #000000" width="57" align="center"><a href="logout.asp?logout=1">退出管理</a></td>
<td width="28" align="center"> </td>
<td width="57" align="center" style="border: 1 solid #000000"><a href="index.asp">文件管理</a></td>
<td align="center"><b><font size="4">[<%=name%>]</font></b><font color="#ccaacc">-version:<%=version%></font> </td>
</tr>
</table>
<br>
<table width="758" align="center" cellpadding="2" cellspacing="0" class="table" style="border: 1 solid #000000">
<tr>
<td align="center" bgcolor="#CCCCCC" style="font: 10.5pt;border-bottom: 1 solid #000000;">管理员操作</td>
</tr>
<tr>
<td height="5"></td>
</tr>
<% i = 1
while not rs.eof
%>
<tr><form action="chk.asp?type=modify" method="post" name="gotoupdate<%=i%>" onsubmit="return adminlogin('gotoupdate<%=i%>')">
<td>管 理 员:
<input name="admin" type="text" readonly id="admin22" value="<%=rs("admin")%>" size="15">
密码:
<input name="pwd" type="password" id="pwd22" value="" size="15" title="修改管理员权限目录时,若密码域留空则不更新密码!">
<% if session("admin") then %>
是否超级管理员:
<input name="super_v" type="checkbox" onClick="javascript:alert('请慎重此项操作!');" id="super_v" style="border: 0 solid #ffffff;" value="1"<% if rs("super") then%> disabled checked<%end if%>>[选中为是]
<% end if %>
<br>
权限目录:
<input name="dir" value="<%=rs("dir")%>" id="dir" type="text" title="1.如果权限目录为多个,请用“|”分隔! 2.非超级管理员无修改此目录的权限! 3.超级管理员此权限目录第一个有效目录为登录默认目录!" size="80" <%If not session("admin") Then%>readonly<%End If%>>
<br>
限制文件类型:
<input name="exten" value="<%=rs("exten")%>" id="exten" title="1.请用“.exe”格式填写! 2.如为多个,直接连起来填写即可;如“.exe.asp”! 3.非超级管理员无修改此文件类型的权限!" size="70" <%If not session("admin") Then%>readonly<%End If%>>
<input class="button" type="submit" name="Submit4" value="更新">
</td></form>
</tr>
<% rs.movenext
i = i + 1
wend
end if
rs.close()
set rs=nothing
set conn=nothing
%>
<% if session("admin") then %>
<tr>
<td height="1" bgcolor="#000000"></td>
</tr>
<tr>
<td height="4" bgcolor="#eeeeee"></td>
</tr>
<tr><form action="chk.asp" method="post" name="addordel" onsubmit="return adminlogin('addordel')">
<td bgcolor="#eeeeee"> 管 理 员:
<input name="admin" type="text" id="admin" value="" size="15">
密码:
<input name="pwd" type="password" id="pwd25" value="" size="15">
设为超级管理员:
<input name="super_v" style="border: 0 solid #ffffff;" type="checkbox" id="super_v" value="1">
执行操作:<input type="radio" style="border: 0 solid #ffffff;" name="aord" value="add" onClick="javascript:document.addordel.aord_v.value = this.value;">添加
<input type="radio" style="border: 0 solid #ffffff;" name="aord" value="del" onClick="javascript:if(confirm('确认执行删除管理员操作吗?\t'))document.addordel.aord_v.value = this.value; else return false;">删除
<input name="aord_v" type="hidden" id="aord_v"><br>
权限目录:
<input name="dir" type="text" id="dir" title="如果权限目录为多个,请用“|”分隔!" size="80">
<br>
限制文件类型:
<input name="exten" value=".asp.mdb.xml.asa.cdx.wsh.vbs.sct.wsf" type="text" id="exten" title="1.请用“.exe”格式填写! 2.如为多个,直接连起来填写即可;如“.exe.asp”!" size="70">
<input class="button" type="submit" name="Submit4" value="执行">
</td></form>
</tr>
<% end if %>
<tr>
<td height="5" bgcolor="#eeeeee"></td>
</tr>
<tr bgcolor="#CfCfCf">
<td style="border-top: 1 solid #000000"> </td>
</tr>
</table>
<table width="700" border="0" align="center" cellpadding="1" cellspacing="0">
<tr>
<td height="5"></td>
</tr>
<tr>
<td>注意:网站根目录为:<font color=red><%=rootdir%></font>,本系统所在目录为:<font color=red><%=sysdir%></font>,请注意<font color=red>权限目录</font>的设置!</td>
</tr>
</table>
<%
end if
%>
<br><center><%=copyright%></center>
</body>
</html>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -