<%
action=SafeRequest("action")
UserName=SafeRequest("UserName")
UserPass=SafeRequest("UserPass")
if action="login" then
'if UserName=WinMyDNSAdminUser and UserPass=WinMyDNSAdminPass then
' session("WinMyDNSUserName")=UserName
' response.redirect "DNS.asp"
'else
' Msg = "管理用户名或密码错"
'end if
rndcode = SafeRequest("rndcode")
if rndcode<>session("rndcode") then
session("rndcode") = ""
call Alert_Redirect("验证码错误","index.asp")
end if
set rs=conn.execute("select * from userlist where username='"&Saferequest("username")&"' ")
if rs.eof then
PopMsg "会员不存在或密码错"
else
if rs("verify")="N" then PopMsg "会员未经审核,暂时不能登录,请等待管理员审核!"
UserPass = md5(UserPass)
password =rs("password")
if len(password)<>32 then '如果是明文密码的,则自动加密
password = md5(password)
conn.execute("update userlist set password='"&password&"' where username='"&Saferequest("username")&"' ")
end if
if password<>UserPass then PopMsg "会员不存在或密码错"
'PopMsg "会员不存在或密码错["& rs("password") &"]["&Saferequest("UserPass")&"]"
session("WinMyDNSUserName")=UserName
session("WinMyDNSIsAdmin")=rs("isadmin")
session("WinMyDNSsoanum")=rs("soanum")
session("WinMyDNSrrnum")=rs("rrnum")
rs.close
response.redirect "DNS.asp"
end if
end if
%>
控制面板登录
