<%response.buffer=true%>
<!--#include file=../conn/adodb1.asp -->
<!--#include file="md5.asp"--> 

<%
dim user,pwd,ip,de,yzm
user=trim(request.form("user"))
pwd=md5(trim(request.form("pwd")))
ip=request.ServerVariables("remote_addr")
de=now()
yzm=request.form("yzm")

if yzm<>session("verifycode") then
response.write"<SCRIPT language=JavaScript>alert('驗證碼錯誤！');"
response.write"javascript:history.go(-1)</SCRIPT>"
response.end
end if

dim sql,sq,rs
set rs=server.createobject("adodb.recordset")
sql="select * from admin where user='"& user &"' and pwd='"& pwd &"'"
rs.open sql,db,1
if rs.recordcount>0 then
session("cjuser")=user
session("pwdd")=pwd
sq="insert into loging(uid,pwd,ip,da,jb) values ('"&user&"','"&pwd&"','"&ip&"','"&de&"','管理員')"
db.execute(sq)
session("user")=user
response.redirect "manage.asp"
else
response.write"<SCRIPT language=JavaScript>alert('對不起用戶名或密碼錯誤！');"
response.write"javascript:history.go(-1)</SCRIPT>"
end if
rs.close
set rs=nothing
db.close
set db=nothing
%>