¸ßÊÖÇë°ïÎÒ¿´¿´Õâ¶Î´úÂëÓÐûÓЩ¶´

ÔÆ-Æ®ÌìÑÄ

<%
dim ComeUrl,cUrl,AdminName
ComeUrl=lcase(trim(request.ServerVariables("HTTP_REFERER")))
if ComeUrl="" then
    response.write "<br><p align=center><font color='red'>¶Ô²»Æð£¬ÎªÁËϵͳ°²È«£¬²»ÔÊÐíÖ±½ÓÊäÈëµØÖ··ÃÎʱ¾ÏµÍ³µÄºǫ́¹ÜÀíÒ³Ãæ¡£</font></p>"
    response.end
else
    cUrl=trim("http://" & Request.ServerVariables("SERVER_NAME"))
    if mid(ComeUrl,len(cUrl)+1,1)=":" then
        cUrl=cUrl & ":" & Request.ServerVariables("SERVER_PORT")
    end if
    cUrl=lcase(cUrl & request.ServerVariables("SCRIPT_NAME"))
    if lcase(left(ComeUrl,instrrev(ComeUrl,"/")))<>lcase(left(cUrl,instrrev(cUrl,"/"))) then
        response.write "<br><p align=center><font color='red'>¶Ô²»Æð£¬ÎªÁËϵͳ°²È«£¬²»ÔÊÐí´ÓÍⲿÁ´½ÓµØÖ··ÃÎʱ¾ÏµÍ³µÄºǫ́¹ÜÀíÒ³Ãæ¡£</font></p>"
        response.end
    end if
end if

AdminName=replace(session("AdminName"),"'","")
if AdminName="" then
    call CloseConn()
    response.redirect "login.asp"
    response.End()
end if
sql="select UserName from Admin where UserName='" & session("AdminName") & "' and Password='" & session("AdminPassword") & "'"
set rs=conn.execute(sql)
if rs.eof and rs.bof then
  rs.close
  response.Redirect("login.asp")
  response.End()
end if
%>

åÐÒ£

°ÑÖØÒª×Ö·û¹ýÂËһϾÍÐÐÁË