WooYun.org

If reqf("submit") = "管理登陆" Then
    Call nullback(reqf("login_name"), "用户名不能为空！")
    Call nullback(reqf("login_password"), "密码不能为空！")
    Call nullback(reqf("login_verifycode"), "验证码不能为空！")
    If CStr(Session("CheckCode")) <> CStr(Request.Form("login_verifycode")) Then
        Call infohref("验证码错误！","cms_login.asp")
    End If
    Set rs = ado_query("select * from cms_admin where a_enable = 1 and a_name='"&str_safe(request.Form("login_name"))&"' and a_password='"&md5(str_safe(request.Form("login_password")))&"'")
    If Not rs.EOF Then
	    Response.Cookies("admin_check") = request.Form("login_name")
        rs.close
		set rs = nothing
        response.redirect "cms_welcome.asp"
    Else
        rs.close
		set rs = nothing
        Call infohref("错误提示：用户名或密码错误，请核对后重新输入！","cms_login.asp")
    End If
End If
%>

'==========获取当前账户相关信息==========
If inull(Request.Cookies("admin_check")) Then
    Response.Redirect("index.asp")
End If
Set rs_gap = ado_query("select * from cms_admin where a_name = '"&Request.Cookies("admin_check")&"'")
If rs_gap.EOF Then
    Response.Redirect("index.asp")
End If
admin_name = rs_gap("a_name")
admin_truename = rs_gap("a_truename")
admin_penname = rs_gap("a_penname")
admin_purview = rs_gap("a_purview")
rs_gap.Close
Set rs_gap = Nothing