WooYun.org

Dim sErr
	Dim sAction
	Dim sUid, sPwd
	Dim Rs
	sAction = Request("action")
	if sAction="login" then
		sUid = Request("UserName")
		sPwd = Request("Password")
		Set Rs = Gndl.GetListBySql("select * from admin where cUserName='" & sUid & "' and cPwd='" & sPwd & "'" )
		if not (rs.eof and rs.bof) then
			Rs.close
			Set Rs = Nothing
			Session("admin") = sUid
			Response.Redirect("index.asp")
		else
			Rs.close
			Set Rs = Nothing
			Set Rs = Gndl.GetListBySql("select * from member where  cTel= '管理员' and cName='" & sUid & "' and cPwd='" & sPwd & "'" )
			if not (rs.eof and rs.bof) then
				Session("admin") = sUid
				Response.Redirect("index.asp")