chklogin.asp

admin/admin.asp是WAP的后台管理登陆页面

<!--#include file="conn.asp"-->
<%
	dim sql
	dim rs
	dim username
	dim password
	username=request("username")
	password=request("password")
        mofei=trim(request.form("mofei"))
if mofei="" then
response.write "验证码为空!"
response.end 
end if
if cstr(session("getcode"))<>cstr(mofei) then
response.write "验证码输入有误!请核对!"
response.end 
end if
response.write "你输入的验证码正确!是:"&mofei

	set rs=server.createobject("adodb.recordset")
	sql="select * from admin where password='"&password&"' and username='"&username&"'"
'	response.write ""&sql&""
'	response.end
	rs.open sql,conn,1,1
 	if not(rs.bof and rs.eof) then
 		if password=rs("password") then
                        session.Timeout=999
			session("admin")=rs("username")
			session("flag")=rs("flag")
			Response.Redirect "admin.asp"
 		else
			call Error
 		end if
	else
		call Error()
	end if

	sub Error()
    	response.write "<br/>"
    	response.write "&#x64CD;&#x4F5C;: &#x786E;&#x8BA4;&#x8EAB;&#x4EFD;&#x5931;&#x8D25;!"
    	response.write "<br/>&#x7528;&#x6237;&#x540D;&#x6216;&#x5BC6;&#x7801;&#x9519;&#x8BEF;!"
    	response.write "&#x8FD4;&#x56DE;"        
	end sub
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing
%>