<%sub admin_body()
dim adminname
dim adminpwd
if request("action")="adminlogin" then
adminname=trim(replace(request("adminname"),"'",""))
adminpwd=trim(replace(request("adminpwd"),"'",""))

if adminname="" and adminpwd="" then
   founderr=true
   errmsg=errmsg+"<br>"+"<li>請輸入用戶名或密碼！"
end if
if founderr then
call diserror
response.end
end if
openadmin
sql="select * from admin where admin_name='"&adminname&"' and admin_password='"&adminpwd&"'"
set rs=conn.execute(sql)
if rs.eof and rs.bof then
   rs.close
   set rs=nothing
   founderr=true
   errmsg=errmsg+"<br>"+"<li>您輸入的用戶名和密碼不正確!"
else
   session("adminlogin")=sessionvar
   session("issuper")=rs("admin_id")
   session.timeout=50
   rs.close
   set rs=nothing
end if
elseif request("action")="logout" then
  session("adminlogin")=""
  session("issuper")=""
end if
%>
<link rel="stylesheet" href="site_css.css" type="text/css">

<table width="<%=tablewidth%>" border="0" cellspacing="0" cellpadding="0" align="center">
  <tr> 
    <td colspan="3" height="8" bgcolor="#FFFFFF"></td>
  </tr>
  <tr> 
    <td width="205" bgcolor="#FFFFFF" valign="top"> 
      <%call adminmenu()%>
    </td>
    <td width="1" background="images/dotlinev.gif"></td>
    <td width="554" bgcolor="#FFFFFF" valign="top"> 
      <%if session("adminlogin")<>sessionvar then%>
      <br>
      <br>
      <table width="96%" border="0" cellspacing="1" cellpadding="4" align="center" bgcolor="#293863">
        <form name="form1" method="post" action="admin.asp?action=adminlogin">
          <tr> 
            <td align="center" class="diaryhead">管理員登陸(如果您不是管理員請勿登錄)</td>
          </tr>
          <tr> 
            <td bgcolor="#FFFFFF" class="chinese" align="center">用戶名 
              <input type="text" name="adminname" class="textarea">
              &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;密碼 
              <input type="password" name="adminpwd" class="textarea">
              &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
              <input type="submit" name="Submit" value="登錄" class="button">
            </td>
          </tr>
        </form>
      </table>
      <%else%>
      <table border="0" cellspacing="0" cellpadding="0">
        <tr> 
          <td height="6"></td>
        </tr>
      </table>
      <table width="98%" border="0" cellspacing="1" cellpadding="4" align="center" bgcolor="#293863">
        <tr> 
          <td class="diaryhead">歡迎<%=adminname%>進入管理頁面</td>
        </tr>
        <tr> 
          <td bgcolor="#FFFFFF" class="chinese"> 
            <div align="center"></div>
            </td>
        </tr>
      </table>
      <%end if%>
      <br>
    </td>
  </tr>
  <tr> 
    <td colspan="3" height="1" background="images/dotlineh.gif"></td>
  </tr>
</table>
<%end sub%>