<%
response.expires = 0
response.expiresabsolute = now() - 1
response.addHeader "pragma","no-cache"
response.addHeader "cache-control","private"
Response.cachecontrol = "no-cache"
dim username,password,show_login,CookieDate,fromurl,action
action=request("action")
if action<>"showindexlogin" and action<>"showjs" then
if oblog.checkuserlogined() then response.Redirect("user_index.asp")
end if
username=oblog.filt_badstr(trim(request.Form("username")))
password=trim(request.form("password"))
CookieDate=trim(request("CookieDate"))
fromurl=trim(request("fromurl"))
if username<>"" or request("chk")="1" then
call sub_chklogin
else
if action="showindexlogin" then
call sub_showindexlogin()
elseif action="showjs" then
blogurl=oblog.setup(3,0)
call sub_showindexlogin()
else
call sub_showlogin()
end if
end if
sub sub_showlogin()
%>
用户管理登陆
<%
end sub
sub sub_chklogin()
if oblog.chkiplock() then
oblog.adderrstr("对不起！你的IP已被锁定,不允许登陆，！")
oblog.showerr
exit sub
end if
if oblog.setup(58,0)=1 then
if not oblog.codepass then oblog.adderrstr("验证码错误，请刷新后重新输入！"):oblog.showerr
end if
if UserName="" then oblog.adderrstr("登陆用户名不能为空！")
if Password="" then oblog.adderrstr("登陆密码不能为空！")
if oblog.errstr<>"" then oblog.showerr:exit sub
if CookieDate="" then CookieDate=0 else CookieDate=Clng(CookieDate)
' password=md5(password)
if is_ot_user=1 then
call ot_chklogin()
Else
oblog.ob_chklogin UserName,MD5(password),CookieDate
If API_Enable Then
Dim blogAPI
Set blogAPI = New DPO_API_OBLOG
blogAPI.LoadXmlFile True
blogAPI.UserName=username
blogAPI.PassWord=password
blogAPI.CookieDate=CookieDate
blogAPI.userip=oblog.userip
Call blogAPI.ProcessMultiPing("login")
Set blogAPI=Nothing
Dim strUrl,i,gourl
if fromurl<>"" Then
gourl=replace(fromurl,"$","&")
Else
gourl=oblog.comeurl
End If
For i=0 To UBound(aUrls)
strUrl=Lcase(aUrls(i))
If Left(strUrl,7)="http://" Then
Response.write("")
Response.Flush
End If
Next
response.write""
End If
end If
If API_Enable=False Then
if fromurl<>"" then
response.Redirect(replace(fromurl,"$","&"))
else
if action="showindexlogin" then
if instr(oblog.comeurl,"/err.asp")>0 then
response.Redirect("index.asp")
else
response.Redirect(oblog.comeurl)
end if
else
response.Redirect("user_index.asp")
end if
end If
End If
end sub
sub ot_chklogin()
dim sql,rs,rsreg
if not IsObject(ot_conn) then link_database
sql="select * from "&ot_usertable&" where "&ot_username&"='"& username & "' and "&ot_password&" ='" & md5(password) &"'"
set rs=ot_conn.execute(sql)
if rs.bof and rs.eof then
set rs=nothing
if isobject(ot_conn) then ot_conn.close:set ot_conn=nothing
oblog.adderrstr("用户名或密码错误，请重新输入！"):oblog.showerr
exit sub
else
set rsreg=server.CreateObject("adodb.recordset")
rsreg.open "select * from [oblog_user] where username='"& username &"'",conn,1,3
if rsreg.eof then
dim reguserlevel
if oblog.setup(16,0)=1 then reguserlevel=6 else reguserlevel=7
set rsreg=server.CreateObject("adodb.recordset")
rsreg.open "select top 1 * from [oblog_user]",conn,1,3
rsreg.addnew
rsreg("username")=username
rsreg("password")="othertable"
rsreg("user_dir")=oblog.setup(30,0)
rsreg("user_level")=reguserlevel
rsreg("lockuser")=0
rsreg("en_blogteam")=1
rsreg("adddate")=now()
rsreg("regip")=oblog.userip
rsreg("lastloginip")=oblog.userip
rsreg("lastlogintime")=ServerDate(now())
If oblog.chkdomain(UserName)=False Then
rsreg("Nickname")=UserName
End If
rsreg.update
oblog.execute("update oblog_user set user_folder=userid where username='"&username&"'")
oblog.execute("update oblog_setup set user_count=user_count+1")
rsreg.close
set rsreg=nothing
oblog.SaveCookie username,md5(password),0," "
oblog.CreateUserDir username,1
set rs=nothing
oblog.showok "您是第一次激活blog系统，请完善blog资料!","user_setting.asp"
response.End()
else
rsreg("LastLoginIP")=Request.ServerVariables("REMOTE_ADDR")
rsreg("LastLoginTime")=now()
rsreg("LoginTimes")=rsreg("LoginTimes")+1
rsreg.update
end if
rsreg.close
set rsreg=nothing
set rs=nothing
if isobject(ot_conn) then ot_conn.close:set ot_conn=nothing
oblog.SaveCookie username,md5(password),CookieDate,""
if action="showindexlogin" then
'response.Redirect(oblog.comeurl)
response.Redirect("user_index.asp")
else
response.Redirect("user_index.asp")
end if
end if
end sub
sub sub_showindexlogin()
dim show_userlogin
if oblog.CheckUserLogined()=False then
show_userlogin=""
else
show_userlogin="--欢迎您," & oblog.logined_uname & "-- "
show_userlogin= show_userlogin&"您的身份："
if oblog.logined_ulevel=7 then
show_userlogin= show_userlogin&"注册用户"
elseif oblog.logined_ulevel=8 then
show_userlogin= show_userlogin&"VIP用户"
elseif oblog.logined_ulevel=9 then
show_userlogin= show_userlogin& "前台管理员"
end if
'show_userlogin= show_userlogin& " 用户控制面板： " & vbcrlf
show_userlogin= show_userlogin& " 我的首页"
show_userlogin= show_userlogin& " 管理中心 "
show_userlogin= show_userlogin& "发表日志 "
show_userlogin= show_userlogin& "注销登录 "
end if
Response.Write oblog.htm2js_div(show_userlogin,"ob_login")
end Sub
%>