|
|
发表于 2013-7-16 22:09:59
|陕西|
显示全部楼层
$email = trim($_POST['email']);2 @8 I+ e' Y2 R, o3 g/ S/ {
$pwd = trim($_POST['pwd']);% |7 V2 m, X5 Z; ?2 ~$ E8 v
$cktime = $_POST['cktime'];
+ @5 D+ k0 O8 d0 b' Z$ x& X$ A ! {- \8 o8 e8 v
if($email=='' || $pwd=='') qiMsg("所有输入项都不能为空^_^");: V0 P, Q& i, Y6 y5 K9 p
, @. ?: @! d1 {" K! n
$countAdmin = $db->once_fetch_assoc("select count(*) from ".dbprefix."user where `email`='$email'");
( Q( e) h# R) y6 `4 D , \& ?# V9 `! w; r% x+ y0 w- f5 z
if($countAdmin['count(*)'] == 0) qiMsg('用户Email不存在!');6 W5 e% d. p+ K# q: g% M
8 j# ~" `+ N& V
$strAdmin = $db->once_fetch_assoc("select * from ".dbprefix."user where `email`='$email'");
2 Z5 o6 U$ W1 T) r+ y4 ?; B 4 F8 d6 F+ J( M3 V) o; _! K
if(md5($strAdmin['salt'].$pwd)!==$strAdmin['pwd']) tsNotice('用户密码错误!'); & U# \! w, h1 }0 d; N N
6 O* R/ g% o' @1 k8 V $strAdminInfo = $db->once_fetch_assoc("select userid,username,isadmin from ".dbprefix."user_info where email='$email'");
5 i5 r- s# E/ Q. y. c, H v / h* s& u1 `/ z- O( q' d+ c% N
if($strAdminInfo['isadmin'] != 1) qiMsg("你无权登录后台管理!");! f: N3 o" m2 c/ g
5 o, _6 w$ D: B4 y8 e/ a$ J. c) t$ ] $_SESSION['tsadmin'] = $strAdminInfo;# \, y$ c1 q# E% A* _1 m9 W
) j; f; e; |; J# \ header("Location: ".SITE_URL."index.php?app=system");
$ V' O5 k. R. Y& O. o- F, ]" f' u
7 g8 J- h* q4 D( W# M1 z3 M9 W$ V |
|