gadmin.asp

一个用jsp 编写的个人主页网站哦。希望对大家有所帮助啊

<!--#include file = "public.asp"-->
<!--#include file = "md5.asp"-->
<%
SQL="Select * From admin"
Set rs=conn.Execute(SQL)
Set rs1=Server.CreateObject("ADODB.RecordSet")
username=request.form("username")
pass=md5(request("password"))
username=replace(username,"'","")
username=replace(username,"""","")
username=replace(username,"=","")
pass=replace(pass,"'","")
pass=replace(pass,"""","")
pass=replace(pass,"=","")
rs1.open "Select * From admin where username='" & username & "' and password='" & pass & "'" ,Conn,1,1
if rs1.eof or rs1.bof then
    rs1.close
	rs1.open "Select * From [user] where username='" & username & "' and password='" & pass & "'" ,Conn,1,1
		if rs1.eof or rs1.bof then 
			response.redirect "Gadmin_err.asp"
			response.End
		else
		    session("name")=username
			session("admintype")="common"
		end if 
else
	session("name")=username
	session("admintype")="admin"
end if
rs1.close
set rs=nothing
response.redirect "adminindex.asp"
%>