<!--#include file="conn.asp" -->
<!--#include file="md5.asp" -->
<% 
dim adminname,adminpass,verify
adminname=request.form("name")
adminpass=request.form("password")
verify=Trim(Request.Form("verify"))
call chkuser()
sql = " select * from 員工信息 where 員工編號(hào)='"&adminname&"' "
set rs = Server.CreateObject("adodb.recordset")
rs.open sql,conn,0,1
if rs.eof and rs.bof then
Response.Write("無(wú)此用戶名")
Response.write("<meta HTTP-EQUIV=REFRESH CONTENT='2; URL=admin.asp'>")
else
if (rs("密碼")=adminpass and rs("權(quán)限")="1|1") then
if verify=session("verifycode") then
call success()
else
Response.Write("校驗(yàn)碼不正確。")
Response.write("<meta HTTP-EQUIV=REFRESH CONTENT='2; URL=admin.asp'>")
end if
else
Response.Write("密碼不正確。")
Response.write("<meta HTTP-EQUIV=REFRESH CONTENT='2; URL=admin.asp'>")
end if
end if

sub chkuser()
if adminname="" or adminpass="" then
Response.Write("請(qǐng)輸入完整信息。")
Response.write("<meta HTTP-EQUIV=REFRESH CONTENT='2; URL=admin.asp'>")
end if
end sub
sub success()
session("admin")=true
session("flag") = rs("權(quán)限")
Response.Redirect("admin_index.asp")
end sub
 %>