<!--#include file="conn.asp" -->
<%
if request("pwd1")<>"" then
   id=request("id")
   userid=request("userid")
   photo_name=trim(request("photo_name"))
   pwd=replace(trim(request.form("pwd1")),"'","''")
   sql="select * from ftblog_type where sign=2 and userid="&userid&" and blogtype='"&photo_name&"' and alumpwd='"&pwd&"'"
   set rs=server.createobject("adodb.recordset")
   rs.open sql,conn,3,1
   if not rs.eof then
   session("passok")=request("pwd1")
   session("userid")=userid
   response.redirect "disphoto.asp?id="&id&"&userid="&userid&"&photo_name="&photo_name&"&sign=2"
   else
   response.write "<center><br><br><br><br><br>你的密码不正确,请重新输入</center>"
   response.end
   end if
end if
%>
<HTML>
<HEAD>
<TITLE>相册密码确认</TITLE>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="stylesheet" type="text/css" href="/htmledit/wbTextBox/editor_dialog.css">
<script language="JavaScript">
function OK(){
  var str1="";
  var strurl=document.form1.pwd1.value;
  if (strurl=="")
  {
  	alert("请输入密码！");
	document.form1.pwd1.focus();
	return false;
  }
  else
  { 
    document.form1.submit()
    window.close();
  }
}
</script>
</head>
<BODY bgColor=menu topmargin=15 leftmargin=15 >
<form name="form1" method="post" action="">
<table width=100% border="0" align="center" cellpadding="0" cellspacing="2">
  <tr><td>
<FIELDSET align=left>
        <LEGEND align=left>密码确认</LEGEND>
        <table width="100%" border="0" align=center cellpadding="0" cellspacing="3">
          <tr> 
            <td colspan="2">密    &nbsp;&nbsp;&nbsp;码： 
              <input name="pwd1" type="password" id="pwd1" value='' size=10 maxlength="10">
              <input name="id" type="hidden" id="id" value="<%=request("id")%>">
              <input name="userid" type="hidden" id="userid" value="<%=request("userid")%>"> 
              <input name="photo_name" type="hidden" id="photo_name" value="<%=request("photo_name")%>"> 
            </td>
          </tr>
        </table>
</fieldset>
</td>
      <td width=80 align="center" valign="middle"> 
        <input name="cmdOK" type="button" id="cmdOK" value="  确定  " onClick="OK();">
      </td>
    </tr>
</table>
</form>
</body>
</html>