<%Session.CodePage=65001%>
<!--#include file="connxyz.asp"-->
<%call passChk()
call passChk()
dim UserName,PassWord,NumCode
UserName=trim(request("UserName"))
PassWord=md5(trim(request("PassWord")))
NumCode=trim(request("NumCode"))
IF Not IsNumeric(NumCode) Then
Call BackUrl("请输入验证码")
ElseIF int(NumCode)<>int(Session("NumCode")) Then
Call BackUrl("验证码错误")
end if
Set rs=Server.Createobject("Adodb.Recordset")
sql="select * from adminx where adx_name='"&UserName&"' and adx_pass='"&PassWord&"'"
rs.open sql,conn,1,3
if rs.eof and rs.bof then
Call BackUrl("帐号或者密码不对！")
else
session("adminxxx")=rs("adx_name")
session("adxclass")=rs("adx_lm")
session.Timeout=40
'添加日志
Set rslog=Server.Createobject("Adodb.Recordset")
sql="select * from adminlog"
rslog.open sql,conn,1,3
rslog.addnew
rslog("L_loginT")=now()
rslog("L_ip")=request.ServerVariables("REMOTE_ADDR")
rslog("adx_id")=rs("adx_id")
rslog.update
rslog.close
set rslog=nothing
rs.close
set rs=nothing
response.Redirect("../main/admain.asp")
end if%>