adminuser.asp

一个漂亮的网络工作室源码 后台地址:/admin 用户名:admin 密码:admin888

<!--#include file="conn.asp"-->
<!--#include file="config.asp"-->
<!--#include file="md5.asp"-->
<!--#include file="top.asp"-->
<%
select case request("action")
case "saveedit"
call saveedit()
case else
call normal()
end select
sub normal()
%>
<table border="0" align="center" cellpadding="3" cellspacing="1" class="tablecolor">
  <tr> 
    <td height="25" align="center" class="tablebody" colspan="2">修改密码</td>
  </tr>
  <form name="form1" method="post" action="?action=saveedit">
    <tr > 
      <td width="30%" align="center" class="tablebody">用户名：</td>
      <td class="tablebody"><input name="adminname" type="text" id="adminname" value="<%=request.cookies("admin")("name")%>" maxlength="50" readonly="1"></td>
    </tr>
    <tr > 
      <td align="center" class="tablebody">原始密码：</td>
      <td class="tablebody"><input name="pwd" type="password" id="pwd" value="<%=request.cookies("admin")("password")%>" maxlength="50">
      </td>
    </tr>
    <tr > 
      <td align="center" class="tablebody">新密码：</td>
      <td class="tablebody"> <input name="newpwd" type="password" id="newpwd">
        至少6位</td>
    </tr>
    <tr > 
      <td align="center" class="tablebody">确认新密码：</td>
      <td class="tablebody"> <input name="newpwd2" type="password" id="newpwd2" maxlength="50"></td>
    </tr>
    <tr> 
      <td colspan="2" align="center"  class="tablebody"> <input type="submit" name="Submit" value="提交"> 
        &nbsp; <input type="reset" name="Submit2" value="重置"></td>
    </tr>
  </form>
</table>

<%
end sub
sub saveedit()
dim adminname,pwd,newpwd,newpwd2,content
content=checkStr(request.Form("content"))
adminname=checkStr(request.Form("adminname"))
pwd=checkStr(Request.Form("pwd"))
newpwd=checkStr(Request.Form("newpwd"))
newpwd2=checkStr(Request.Form("newpwd2"))
if adminname="" then
response.Write("<script>alert('用户名不能为空！');history.back()</script>")
response.End()
end if
if Instr(adminname,"=")>0 or Instr(adminname,"%")>0 or Instr(adminname,chr(32))>0 or Instr(adminname,"?")>0 or Instr(adminname,"&")>0 or Instr(adminname,";")>0 or Instr(adminname,",")>0 or Instr(adminname,"'")>0 or Instr(adminname,",")>0 or Instr(adminname,chr(34))>0 or Instr(adminname,chr(9))>0 or Instr(adminname,"