⭐ 欢迎来到虫虫下载站! | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站

📄 admin_user.asp

📁 盗号用的
💻 ASP
字号:
<!--#include file="../Conn.asp"-->
<!--#include file="../Include/Md6.asp"-->
<%
If Session("AdminUserName") = "" Then
    Response.Write "<script>window.open('Login.asp','_parent');</script>"
	Response.End
End If 

server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
if  mid(server_v1,8,len(server_v2))<>server_v2  then
    response.write "<script>alert('警告!你正在从外部提交数据!!请立即终止!!');location.href='../index.htm';</script>"
    Response.End
end If

Dim action,Id,Rs,Sql,UserName,PassWord
action = Request("action")
Id = Request("Id")
UserName = Request.Form("UserName")
PassWord = Request.Form("PassWord")
If Not IsNumeric(Id) Or Id = "" Then
    Id = 0
End If 
If action = "Add" Then
	Call RegStr("^\s*[A-Za-z0-9_-]{3,15}\s*$",UserName,"用户名必须是数字或字母,长度为3-15个字符!")
	Call RegStr("^\s*[A-Za-z0-9_-]{3,15}\s*$",PassWord,"密码必须是数字或字母,长度为3-15个字符!")
    Set Rs = Conn.ExeCute("Select * From Admin where UserName='" & UserName & "'")
	If Not (Rs.Eof Or Rs.Bof) Then
        Response.Write "<script>alert('您要添加的管理员已存在!');location.href='admin_user.asp';</script>"
	    Response.End
	End If
	Set Rs = Nothing
    Set Rs = Server.CreateObject("Adodb.Recordset")
	Sql = "Select * From Admin"
	Rs.Open Sql,Conn,1,3
	Rs.AddNew
	Rs("UserName") = UserName
	Rs("PassWord") = Md6(PassWord)
	Rs.Update
	Rs.Close
	Set Rs = Nothing
    Response.Write "<script>alert('管理员添加成功!');location.href='admin_user.asp';</script>"
	Response.End
End If 
If action = "Edit" Then
    Set Rs = Conn.ExeCute("Select * From Admin where id=" & Id)
	If Not (Rs.Eof Or Rs.Bof) Then
	    UserName = Rs("UserName")
		Set Rs = Nothing
	Else
	    Set Rs = Nothing
        Response.Write "<script>alert('您要修改的管理员不存在!');location.href='admin_user.asp';</script>"
	    Response.End	
	End If
End If 
If action = "Save" Then
	Call RegStr("^\s*[A-Za-z0-9_-]{3,15}\s*$",PassWord,"密码必须是数字或字母,长度为3-15个字符!")
    Set Rs = Server.CreateObject("Adodb.Recordset")
	Sql = "Select * From Admin where id=" & Id
	Rs.Open Sql,Conn,1,3
	If Not (Rs.Eof Or Rs.Bof) Then
	    Rs("PassWord") = Md6(PassWord)
		Rs.Update
		Rs.Close
		Set Rs = Nothing
        Response.Write "<script>alert('密码修改成功!');location.href='admin_user.asp';</script>"
	    Response.End
	Else
	    Set Rs = Nothing
        Response.Write "<script>alert('您要修改的管理员不存在!');location.href='admin_user.asp';</script>"
	    Response.End	
	End If
End If
If action = "Del" Then
    Conn.Execute("Delete From Admin where id=" & Id)
    Response.Write "<script>alert('管理员删除成功!');location.href='admin_user.asp';</script>"
	Response.End
End If 
%>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title><%=Name%>—后台管理</title>
<link href="../images/text.css" rel="stylesheet" type="text/css">
</head>
<body leftmargin="0" topmargin="0">
<table width="100%" height="32"  border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td align="center" background="../images/bj3.jpg">管理员账户管理</td>
  </tr>
  <tr>
    <td></td>
  </tr>
</table>
<br>
                <form id="form1" name="form1" method="post" action="admin_user.asp">
                  <table width="400" border=0 align="center" cellPadding=3 cellSpacing=0 bordercolor="#999999" borderColorDark=#ffffff bgcolor="#F9F9F9">
                    <tr>
                      <td width="100" align="right" valign="middle"><span class="font_red">管理员帐户:</span></td>
                      <td><input name="UserName" type="text" class="inp1" id="UserName" style="width:200px;" value="<%=UserName%>" /></td>
                    </tr>
                    <tr>
                      <td width="100" align="right" valign="middle"><span class="font_red">管理员密码:</span></td>
                      <td><input name="PassWord" type="password" class="inp1" id="PassWord" style="width:200px;" /></td>
                    </tr>
  
<%
If action = "Edit" Then
    Response.Write "<input name=""Id"" type=""hidden"" value=""" & Id & """ />"
    Response.Write "<input name=""action"" type=""hidden"" value=""Save"" />"
	Response.Write "<tr><td colspan=""2"" align=""center"" valign=""middle""><input class=btn type=""submit"" name=""submit"" value="" 修 改 管 理 员 ""></td></tr>"
Else
    Response.Write "<input name=""action"" type=""hidden"" value=""Add"" />"
	Response.Write "<tr><td colspan=""2"" align=""center"" valign=""middle""><input class=btn type=""submit"" name=""submit"" value="" 添 加 管 理 员 ""></td></tr>"
End If
%>	                    
                  </table>
</form><br />
<table width="600" border=1 align="center" cellPadding=3 cellSpacing=0 bordercolor="#999999" borderColorDark=#ffffff bgcolor="#F9F9F9">
  <tr bgcolor="#F5FBFE" align="center">
                    <td width="20%" align="center" valign="middle" class="td2">管理员帐户</td>
                    <td width="20%" align="center" valign="middle" class="td2">上次登陆IP</td>
                    <td width="35%" align="center" valign="middle" class="td2">上次登陆时间</td>
                    <td width="12%" align="center" valign="middle" class="td2">修改</td>
                    <td width="13%" align="center" valign="middle" class="td2">删除</td>
  </tr>

<%
Set Rs = Conn.Execute("Select * From Admin Order By Id Asc")
Do While Not Rs.Eof
%>
                  <tr bgcolor="#FFFFFF" align="center">
                    <td align="left" valign="middle" class="td">&nbsp;<%=Rs("UserName")%></td>
                    <td align="left" valign="middle" class="td">&nbsp;<%=Rs("LoginIp")%></td>
                    <td align="center" valign="middle" class="td">&nbsp;<%=Rs("LoginTime")%></td>
                    <td align="center" valign="middle" class="td"><a href="admin_user.asp?action=Edit&Id=<%=Rs("Id")%>">修改</a></td>
                    <td align="center" valign="middle" class="td"><a href="admin_user.asp?action=Del&Id=<%=Rs("Id")%>">删除</a></td>
                  </tr>
<%
    Rs.MoveNext
Loop
Set Rs = Nothing
%>
</table>
<br>

</body>
</html>

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -