<%
startime=timer() '定义底部程序执行时间
Webdbpath="data/"&dbName '数据库绝对路径，请区分相对路径与绝对路径
set conn=server.CreateObject("adodb.connection")
sqlconn="provider=microsoft.jet.oledb.4.0;data source="&server.MapPath(Webdbpath)
conn.open sqlconn
set rs=server.CreateObject("adodb.recordset")
'出错提示：
If Err Then
err.Clear
Set conn = Nothing
Response.write ""&vbcrlf
Response.Write "网站异常出错，请与管理员联系，谢谢！
"
Response.End
End If
%>
管理员登录-企业网站管理系统
<%
on error resume next
if request.QueryString("submit")="submit" then
if request.form("username")="" or request.form("password")="" then
response.write""
response.end
end if
if etext(request.form("username")," ~!@#$%^&*()|<>?:""';/.,\=") or etext(request.form("password")," '""<>") then
response.write""
else
username=request.form("username")
password=md5(request.form("password"))
end if
sql="select top 1 * from admin where adminuid='"&username&"' and adminpwd='"&password&"'"
rs.open sql,conn,1,1
if rs.eof then
call adminLogin("loginerr")
response.write""
else
session("adminpid")=request.form("username")
session("adminpwd")=md5(request.form("password"))
session("purview")=rs("purview")
'记录用户登录信息，
Response.Cookies("login")("adminpid")=request.form("username")
Response.Cookies("login")("adminpwd")=md5(request.form("password"))
Response.Cookies("login")("purview")=rs("purview")
response.cookies("login").expires=date+30
call adminLogin("success")
response.Redirect("index.asp?action=ok")
end if
end if
sub adminLogin(logininfo)
userip2 = Request.ServerVariables("HTTP_X_FORWARDED_FOR")
If userip2 = "" Then
userip2 = Request.ServerVariables("REMOTE_ADDR")
end if
set rslogin=server.CreateObject("adodb.recordset")
sqladmin="select * from adminLogin"
rslogin.open sqladmin,conn,1,3
rslogin.addnew
rslogin("adminDate")=now()
rslogin("loginInfo")=logininfo
rslogin("inputUser")=request.form("username")
rslogin("inputPass")=request.form("password")
rslogin("loginIP")= userip2
rslogin.update
rslogin.close
set rslogin=nothing
End sub
if err.number<>0 then
response.write "出现异常错误,请与管理员联系!
"
response.end
end if
%>