?<%@ Language=VBScript %>
<%response.CharSet="utf-8" %>
<!--#include file="inc/conn.asp"-->
<!--#include file="inc/md5.asp"-->
<% 
if trim(request.form("rnd"))="" then
    response.write "非法提交!"
    response.end
end if
dim ty:ty=request.Form("type")

select case ty
    case "login"
        call login()
    case "logout"
        call logout()
    case "session"
        call checkonline()
end select

function login()
    dim us:us=split(admins,",")
    dim uname:uname=lcase(request.Form("username"))
    dim upwd:upwd=lcase(request.Form("password")) 
    has=false
    for i=0 to ubound(us)
        if uname=us(i) then
            has=true
            exit for
        end if
    next
    if has=true then
        if md5(upwd)=pwd then
            session("admin")=uname
            if adminToFront then
                if isOnline(session("user")) then
                     conn.execute "delete from [online] where [User]='" & session("user") & "'"
                end if
                session("user")=uname
                conn.execute "insert into [online]([User],[LoginTime],[LastTime]) values('" & uname & "'," & cint(timer/60) & "," & cint(timer/60) & ")"
            end if
            response.Write "ok"
        else
            response.write "err"
        end if
    else
        response.write "err"
    end if
end function
function logout()
    session("admin")=""
    response.Write "ok"
end function
function checkonline()
    dim s:s="no"
    if session("admin")<>"" then s="ok"
    response.Write s
end function
%>