|
|
发表于 2013-7-16 22:09:59
|陕西|
显示全部楼层
$email = trim($_POST['email']);
5 l0 L& M F) i9 _4 p- K $pwd = trim($_POST['pwd']);4 z- g- x3 k$ a2 D) Q: P/ k9 I
$cktime = $_POST['cktime'];
! I# b W5 ^! u $ m% @6 E: K$ m1 ~1 g
if($email=='' || $pwd=='') qiMsg("所有输入项都不能为空^_^");
S/ @2 b, B$ W2 a8 D" s$ g( S 7 f, Z5 S: h0 b
$countAdmin = $db->once_fetch_assoc("select count(*) from ".dbprefix."user where `email`='$email'");
) f* u8 G' U1 c+ R, R
$ v9 m( {8 G U! D if($countAdmin['count(*)'] == 0) qiMsg('用户Email不存在!');) }8 `( R/ }2 i' S0 X
! U4 X+ A7 G/ t+ i
$strAdmin = $db->once_fetch_assoc("select * from ".dbprefix."user where `email`='$email'");
2 z4 l2 o" i% @5 N0 p: _ $ \! @& P& M F2 ?* h7 q7 g
if(md5($strAdmin['salt'].$pwd)!==$strAdmin['pwd']) tsNotice('用户密码错误!'); + @5 K+ r- M$ ~8 U& u" w
( z- F! j. h7 h$ u* C
$strAdminInfo = $db->once_fetch_assoc("select userid,username,isadmin from ".dbprefix."user_info where email='$email'");
, t4 [& T a* Y 1 k# p$ t7 Y3 I! }, U+ l4 h2 @4 h
if($strAdminInfo['isadmin'] != 1) qiMsg("你无权登录后台管理!");& d, G* d% T' v/ x
- T! H# t1 d. K6 Z $_SESSION['tsadmin'] = $strAdminInfo;
" L8 _9 n) B# F 1 k2 {$ A5 z! ~5 w4 n3 I7 O
header("Location: ".SITE_URL."index.php?app=system");2 I9 _. O+ W( m9 U, ` {* ?
# t7 N# @/ e3 g9 a* [
|
|