<%@ page language="java" import="java.util.*" pageEncoding="GB18030"%>
<%@include file="..\\conn\\link.jsp" %>
<jsp:useBean id='oMD5' scope='request' class='beartool.MD5'/>
<%String action=request.getParameter("action");%>
<%//////////////////////////本頁主要為登入與登出的代碼////////////////////////////
if(action.equals("login"))
{
	String username=(String)request.getParameter("username");
	String userpsw=oMD5.getMD5ofStr((String)request.getParameter("userpsw"));

	Statement stmt1=conn.createStatement();
	String sql1="select * from tb_admin where admin_name='"+username+"'";
	ResultSet Rs1=stmt1.executeQuery(sql1);
	
	
	if(!Rs1.next())
	{
		out.print("<script language=javascript>alert('請不要攻擊小站!');javascript:history.go(-1);</script>");
	}else
	
	if(!userpsw.equals(Rs1.getString("admin_psw")))
	{
		out.print("<script language=javascript>alert('密碼錯誤！');history.back(-1);</script>");
	}
	else
	{
		session.setAttribute("username",username);
		session.setAttribute("userpsw",userpsw);
		
		
		try
		{
			if(Rs1.getString("admin_quanxian").equals("3"))
			{
				session.setAttribute("quanxian","3");		
			}
		}
		catch (Exception e)
		{
			e.printStackTrace();
		}
		response.sendRedirect("admin.jsp");
		
		Rs1.close();
		stmt1.close();
		conn.close();
	}
	
}

if(action.equals("logout"))
{
	session.invalidate();
	response.sendRedirect("../default.jsp");
}

%>