<!--#include file="inc.asp"-->
<!--#include file="../inc/md5.asp"-->

<%
dim qs,errc,iii
qs=request.servervariables("query_string")
dim nothis(19)
nothis(0)="net user"
nothis(1)="xp_cmdshell"
nothis(2)="/add"
nothis(3)="exec%20master.dbo.xp_cmdshell"
nothis(4)="net localgroup administrators"
nothis(5)="select"
nothis(6)="count"
nothis(7)="asc"
nothis(8)="char"
nothis(9)="mid"
nothis(10)="'"
nothis(11)=":"
nothis(12)=""""
nothis(13)="insert"
nothis(14)="delete"
nothis(15)="drop"
nothis(16)="truncate"
nothis(17)="from"
nothis(18)="%"
nothis(19)="update"
errc=false
for iii= 0 to ubound(nothis)
if instr(qs,nothis(iii))<>0 then
errc=true
end if
next
if errc then
  response.Write("<script>alert('对不起，非法URL地址请求!');history.back(-1);</script>")
	 response.End
end if





	Message = Request("Message")
	if request.ServerVariables("REQUEST_METHOD") = "POST" then
		vName = Request("username")
		vPass=md5(Request("userpass"),16)
	 if  user=vName and userpawds=vPass then 
	 response.Redirect("../admin/index.asp")
	  else
	    if vName="" or vPass="" then
	      no="用户名或密码不能为空！"
	    else
	      no="登录不正确，请重新登陆。"  
	    end if 
	 end if
	
	
	end if
 
 
%>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>网站统计</title>
<link href="style/style.css" rel="stylesheet" type="text/css">
</head>

<body>
<br>
<table width="719" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="136" bgcolor="#0892D3"><img src="images/logo_up.gif" width="135" height="42" align="absmiddle"></td>
    <td width="583" background="images/top_table_leftbg.gif" bgcolor="#0892D3" class="body_title"><strong>统计系统维护登陆 </strong><font color="#FF0000">*</font> 如果您第一次使用系统，请先设置网站基本资料，方可开始统计。 </td>
  </tr>
  <tr>
    <td colspan="2"><img src="images/top_table_leftbg.gif" width="719" height="3"></td>
  </tr>
  <tr>
    <td colspan="2" class="body_bg"><table width="100%" height="100%"  border="0" cellpadding="0" cellspacing="0">
        <tr>
          <td align="center" valign="middle" background="images/body_bg5.gif"> <br>
              <form name="form1" method="post" action="login.asp">
                <table width="265" border="0" align="center" cellpadding="3" cellspacing="0">
                  <tr>
                    <td>&nbsp;</td>
                    <td style="color:red"><%=no%><%=Message%></td>
                  </tr>
                  <tr>
                    <td width="77">用户名：</td>
                    <td width="176"><input name="username" id="username" type="text" class="input"></td>
                  </tr>
                  <tr>
                    <td>密&nbsp;&nbsp;码：</td>
                    <td><input name="userpass"  id="userpass" type="password" class="input"></td>
                  </tr>
                  <tr>
                    <td>&nbsp;</td>
                    <td><input name="Submit" type="submit" class="button" value="  提交  "></td>
                  </tr>
                </table>
				<input type="hidden" name="Message" value="<%=Message%>">
            </form>
              <br>
              <br>
              <br></td>
        </tr>
    </table></td>
  </tr>
  <tr>
    <td colspan="2"><img src="images/top_table_leftbg.gif" width="719" height="3"></td>
  </tr>
</table>
<br>
<table width="530" height="30" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td height="1" align="center" background="images/top_table_leftbg2.gif" bgcolor="#E1ECF2"><table width="530" height="39" align=center  style="color:#FFFFFF ">
<tr align=center>
<td  width="100%" class=copyright>
专业的B2B行业网站系统，行业门户网站的首选系统·中国, Copyright (c) All Rights Reserved 
</td>
</tr></table>
</td>
  </tr>
</table>
</body>
</html>
