|
|
发表于 2013-7-16 22:09:59
|陕西|
显示全部楼层
$email = trim($_POST['email']);
' V& l4 Y! {" B $pwd = trim($_POST['pwd']);
3 M: g( H" r0 @4 v4 a4 j$ ^! v $cktime = $_POST['cktime'];. [- Y2 k$ }& \; O- K* p8 R
$ _" I# ~7 v, H* p" P. p7 l9 p8 o
if($email=='' || $pwd=='') qiMsg("所有输入项都不能为空^_^");2 o, N2 b. ], @! c1 P
3 z, P1 I _9 J8 u' i: B+ h9 n $countAdmin = $db->once_fetch_assoc("select count(*) from ".dbprefix."user where `email`='$email'");2 ?$ s* A8 g: E9 [+ |" g- C
! e7 M& n/ T3 o1 o& d3 _ if($countAdmin['count(*)'] == 0) qiMsg('用户Email不存在！');
4 E* R6 m3 j: q/ [+ x
* E4 B- |- L( R1 `3 Y% c. D $strAdmin = $db->once_fetch_assoc("select * from ".dbprefix."user where `email`='$email'");
% l/ u1 y" S: U
$ F3 X) }+ k3 O" f1 t7 `5 k if(md5($strAdmin['salt'].$pwd)!==$strAdmin['pwd']) tsNotice('用户密码错误！');
" s2 G( A3 Y, O7 Y
' _" Q5 u( @% ]+ f. a $strAdminInfo = $db->once_fetch_assoc("select userid,username,isadmin from ".dbprefix."user_info where email='$email'");
& s$ v: e1 D0 J- G8 r8 C
8 b8 [ \, t5 u4 j; x# I4 K) U% U; i/ m if($strAdminInfo['isadmin'] != 1) qiMsg("你无权登录后台管理！");
0 y( e, K+ B# s. {- M: E( v
5 G7 X! g6 A7 y) m2 i $_SESSION['tsadmin'] = $strAdminInfo;( P2 d6 I$ F' M$ n+ N! _
8 _# p( j: S5 I! v- @$ ]3 b
header("Location: ".SITE_URL."index.php?app=system");/ L( {( v0 Z9 [5 i& ^/ c( G
$ X; H; G& b; j0 Y |
|
楼主: 小草根
[复制链接]
