| 代碼如下 |
複製代碼 |
|
session_start();
/* get post */
if (!function_exists("getpost")){function getpost(){if(count($_post)){foreach($_post as $key => $value){global ${$key};${$key}=$value;}}}}
/* get get */
if (!function_exists("getget")){function getget(){if(count($_get)){foreach($_get as $key => $value){global ${$key};$$key=($value);}}}}
/* sql escape string */
if (!function_exists("escapeit")){
function escapeit($text){
if (get_magic_quotes_gpc()) $text=strips教程lashes($text);
if (!is_numeric($text)) $text=mysql教程_real_escape_string($text);
return $text;
}}
getpost(); //擷取post過來的資料 |
//login
| 代碼如下 |
複製代碼 |
|
$rs = $db->query("select * from `backend_user` where binary `login` = '".escapeit($login)."' and binary `password` = '".md5($password)."'");
if (mysql_num_rows($rs) > 0) {
$row = $db->fetch_array($rs);
$_session["smartinfo_sysid"] = $row["user_id"];
$_session["smartinfo_syslogin"] = $row["login"];
$db->query("update `backend_user` set `last_logon` = '".date("y-m-d h:i:s")."' where `id` = '".$row["id"]."'");
header("location: index2.php");
} else {
header("location: index.php?status=fail");
} |
//利用到的函數
?>
html代碼
| 代碼如下 |
複製代碼 |
|
<table width="100%" height="100%" cellpadding="0" cellspacing="0"><tr><td>
<table width="350" align="center" cellpadding="0" cellspacing="0">
<tr>
<td align="center" class="heading"><div style="font-size:12px;" align="left">control panel</div></td>
</tr>
</table>
<table width="350" align="center" cellpadding="0" cellspacing="0" class="tableborder">
<form action="login.php" method="post" name="login" id="login" onsubmit="return checkvalid(this);">
<tr>
<td align="center"><img src="images/logo.jpg" width="198" height="61"></td>
</tr>
<tr>
<td class="c1" align="right" style="height:10px"></td>
</tr>
<tr><td><table width="85%" align="center" cellpadding="0" cellspacing="0">
<tr>
<td style="font-size:12px"><b>login id:</b></td>
<td align="right"><input name="login" type="text" style="width:220px" ></td>
</tr>
<tr>
<td style="font-size:12px"><b>password:</b></td>
<td align="right"><input name="password" type="password" style="width:220px" size="2" maxlength="15"></td>
</tr>
<tr>
<td></td>
<td align="right" valign="top"><input type="submit" name="submit" id="submit" value="login" class="button"></td>
</tr>
</table></td></tr>
<tr>
<td class="c1" align="right" style="height:10px"></td>
</tr>
</form>
</table>
</td></tr></table> |
資料庫
--
-- 表的結構 `backend_user`
--
create table if not exists `backend_user` (
`user_id` int(11) not null auto_increment,
`group_id` int(11) not null default '0',
`login` varchar(255) not null default '',
`password` varchar(255) not null default '',
`last_logon` datetime not null default '0000-00-00 00:00:00',
primary key (`user_id`)
) engine=myisam default charset=utf8 auto_increment=2 ;
--
-- 匯出表中的資料 `backend_user`
--
insert into `backend_user` (`user_id`, `group_id`, `login`, `password`, `last_logon`) values
(1, 0, 'admin', 'e10adc3949ba59abbe56e057f20f883e', '0000-00-00 00:00:00');
