echklogin.asp

应用于高等院校党团思想教育

<!--#include file="conn.asp"-->
<!-- #include file="inc/char.asp" -->
<%
   	dim sql,rs
	dim asql,ars
   	dim mastername
   	dim masterpass
   	dim founderr
   	founderr=false
   	dim boardID
	dim errmsg

   	'on error resume next
      	boardID=request("Boardid")
      	masterName=HTMLencode(trim(request("username")))
      	masterpass=HTMLencode(trim(request("password")))
	if masterName="" then
		Errmsg=Errmsg+"<br>"+"<li>请输入管理员名称。"
		founderr=true
	end if
	if masterpass="" then
		Errmsg=Errmsg+"<br>"+"<li>请输入管理员密码。"
		founderr=true
	end if
	if founderr=true then
		call error()
	else
	set ars=server.createobject("adodb.recordset")
	asql="select * from admin where password='"&masterpass&"' and username='"&masterName&"'"
	ars.open asql,conn,1,1
 	if not(ars.bof and ars.eof) then
 		if masterpass=ars("password") then
	  		session("masterlogin")="superadmin"
	  		session("mastername")=ars("username")
          		session("manageboard")=boardID
			Response.Redirect "admin_main.asp"
   			ars.close
			set ars=nothing
			conn.close
			set conn=nothing
 		else
			call boardmaster()
			if founderr=true then call error()
 		end if
	else
		call boardmaster()
		if founderr=true then call error()
	end if
	end if
sub boardmaster()	
	set rs=server.createobject("adodb.recordset")
	sql="select * from board where boardid="&cstr(boardid)
	rs.open sql,conn,1,1
  	if not(rs.bof and rs.eof) then
     		if masterpass=rs("masterpwd") and mastername=rs("boardmaster") then
	  		session("masterlogin")="admin"
	  		session("mastername")=rs("boardmaster")
          		session("manageboard")=boardID
   			rs.close
			set rs=nothing
			conn.close
			set conn=nothing
	 		response.redirect "admin_main.asp"
	 
   		elseif masterpass=rs("masterpwd1") and mastername=rs("boardmaster1") then
	  		session("masterlogin")="admin"
	  		session("mastername")=rs("boardmaster1")
          		session("manageboard")=boardID
   			rs.close
			set rs=nothing
			conn.close
			set conn=nothing
	 		response.redirect "admin_main.asp"
	 
   		elseif masterpass=rs("masterpwd2") and mastername=rs("boardmaster2") then
	  		session("masterlogin")="admin"
	  		session("mastername")=rs("boardmaster2")
          		session("manageboard")=boardID
   			rs.close
			set rs=nothing
			conn.close
			set conn=nothing
	 		response.redirect "admin_main.asp"
	 
   		else
			founderr=true
      			errmsg=errmsg+"<br>"+"<li>请输入正确的版主名字和密码。"
   		end if
	end if
end sub
%>