form_chelogin.asp

关于网络渗透技术的详细讲解

<!--#include file="conn.asp" -->
<!--#include file="Include/inc.asp"-->
<!--#include file="Include/md5.asp"-->

<%
If request.Querystring("action")="check" then
	
	Dim Flag,i
	Dim UserName,UserPassword,SaveTimes,nsrmc
	Dim temp(20)
	Dim sysSetting
	Flag=true
	UserName=Request.Form("UserName")
	UserPassword=Request.Form("PassWord")
	SaveTimes=Request.Form("SaveTimes")
	If not ChkForm(UserName,1) then Flag=false
	If not ChkForm(UserPassWord,1) then Flag=false
	If not ChkForm(SaveTimes,0) then Flag=false
	
	If Flag then
		UserPassword=MD5(UserPassword)
		Dim UserID,GID,RegTime
		Sql="select State,Reg_Pass,[ID],User_Group,RegTime,nsrmc From NB_User where Reg_Name='"&UserName&"'"
		set rs=Conn.Execute(Sql)
		If RS.Eof Or Rs.Bof Then sysErr(18)
		If Rs(1)<>UserPassword Then sysErr(36)
		If RS(0)<>1 Then sysErr(3)
		UserID=Rs(2)
		nsrmc=rs(5)
		GID=Rs(3)
		RegTime=Rs(4)
		Sql="Select GroupName,islogin,Setting FROM NB_UserGroup WHERE ID="&GID
		set rs=conn.Execute(Sql)
		If RS.Eof Or Rs.Bof Then sysErr(3)
			If Rs(1)=0 Then SysErr(37)
			temp(0)=UserID
			temp(1)=UserName
			temp(2)=rs(0)
			temp(3)=rs(1)
			temp(19)=nsrmc
			sysSetting=split(rs(2),",")
			for i=0 to 9
				temp(i+4)=sysSetting(i)
			next
			Temp(i+4)=RegTime
			Temp(i+5)=sysSetting(10)
			
			If Temp(7)<>"0" Then 
				If SysOpration(Temp(6))=False Then SysErr(38)
			End If

			session("UserID")=temp
			If SaveTimes=10 then Response.Cookies("userdata").expires=Date()+720
				SQL="UpDate [NB_User] Set [Login]=[Login]+1,LastIp='"&GetUserIp&"',LasTime=Now() Where Id="&GID
				Conn.Execute(SQL)
				 if session("form_h")<>"viewfeed" then
					         response.redirect "../index.asp"
				 else
				     Response.Write "<meta http-equiv='refresh' content='3;URL="&session("form_h")&".asp?feed="&session("feed")&"'>"
				 end if
      else
				sysErr(3)
			end if
		set rs=nothing	
    End if

%>