chklogin.php

网址导航

<?php
require("../mysql.inc.php");
$username=$_REQUEST["username"];
$password=$_REQUEST["password"];
$admin=htmlspecialchars($username);
$p=htmlspecialchars($password);
$mp=md5($p);
if (!isset($admin) || $admin=="") {
	header("location:index.php?u=$admin");exit();
}
$sql="select * from wz_admin where username='$admin' and password='$mp'";
if (!$result=mysql_query($sql)) exit("数据库查询错误！");
$rs=mysql_fetch_array($result);
if (!is_array($rs)) {
	header("location:index.php?u=$admin");exit();
}
$logincount=$rs["logincount"]+1;
$logintime=date("Y-n-d H:i:s");
$loginIP=getenv("REMOTE_ADDR");
$sql="update wz_admin set logincount=logincount+1,logintime='$logintime',loginIP='$loginIP' where username='$admin'";
mysql_query($sql);
$isadmin=true;
$adminlevel=$rs["level"];
session_start();
session_register("admin");
session_register("mp");
session_register("isadmin");
session_register("adminlevel");
header("location:admin.php");
?>