<%dbdns="../"%>
<!--#include file="../inc/conn.asp"-->
<!--#include file="../inc/md5.asp"-->
<%	if request("user")="" then
	response.write "<script>alert('用戶登錄出錯，下面是產生錯誤的可能原因：\n\n·請輸入用戶名');history.go(-1);</Script>"
	Response.End 
elseif Request("pass")="" then
	response.write "<script>alert('用戶登錄出錯，下面是產生錯誤的可能原因：\n\n·請輸入用戶密碼');history.go(-1);</Script>"
	Response.End 
end if

    nick=replace(trim(request("user")),"'","")
    password=md5(replace(trim(Request("pass")),"'",""))

	set rs=server.createobject("adodb.recordset")
	sql="select * from es_smsuser where es_pass='"&password&"' and es_user='"&nick&"'"
	rs.open sql,conn,1,1
 	if not(rs.bof and rs.eof) then
 	   if rs("es_type")=1 then
 	   response.write "<script>alert('用戶被鎖定，請聯系管理員：\n\nQQ:8244204電話:13606180036');history.go(-1);</Script>"
	   Response.End
	   end if 
		session("useradmin")=rs("es_user")
		session("id")=rs("es_id")
		
userip = Request.ServerVariables("HTTP_X_FORWARDED_FOR") 
If userip = "" Then userip = Request.ServerVariables("REMOTE_ADDR") 

'將登陸內容記錄到數據庫
set rs=server.createobject("adodb.recordset")
sql="select * from es_smslog" 
rs.open sql,conn,1,3
rs.addnew
rs("es_id")=session("id")
rs("es_lb")=1
rs("es_ip")=userip
rs.update
rs.close
set rs=nothing

response.redirect "admin.asp" 
response.end 
	else
	response.write "<script>alert('用戶登錄出錯，下面是產生錯誤的可能原因：\n\n·用戶名或密碼錯誤,請重新輸入');history.go(-1);</Script>"
	Response.End 
	end if
	
	rs.close
	conn.close
	set rs=nothing
	set conn=nothing
%>