?<%@ Language=VBScript %>
<%response.charset="utf-8"%>
<!--#include file="inc/conn.asp"-->
<%
if trim(request.form("rnd"))="" then
    response.write "非法提交!"
    response.end
end if
dim target
if request.Form("type")="login" then
    uname=lcase(request.form("username"))
    if uname<>"" then
    	set rs=server.CreateObject ("adodb.recordset")
       	rs.Open "select * from [online] where [User]='" & uname & "'",conn,1,1
    	if (rs.EOF and rs.BOF) and checkAdmin(uname) then
	    	session("user")=uname
	        conn.execute "insert into [online]([User],[LoginTime],[LastTime]) values('" & uname & "'," & cint(timer/60) & "," & cint(timer/60) & ")"
	       response.Write "yes"
	    else
	        response.Write "has"
	    end if
	    rs.Close
    	set rs=nothing
    else
     response.Write "space"	
    end if
elseif request.Form("type")="logout" then
    target=session("user")
    if isOnline(target) then
        conn.execute "delete from [online] where [User]='" & target & "'"
	    session("user")=""
    end if
end if
function checkAdmin(admin)
    dim s:s=split(lcase(admins),",")
    dim a:a=true
    for i=0 to ubound(s)
        if s(i)=lcase(admin) then
            a=false
            exit for
        end if
    next
    checkAdmin=a
end function
conn.close
set conn=nothing
%>