%
Response.expires = 0
Response.expiresabsolute = now() - 1
Response.addHeader "pragma","no-cache"
Response.addHeader "cache-control","private"
Response.addHeader "P3P","CP=CAO PSA OUR"
Response.cachecontrol = "no-cache"
'------------------------------------------------
'检测搜索引擎,截断程序执行,节省资源. *#0801Spider
oblog.ChkSpider(1)
'------------------------------------------------
Dim username,password,show_login,CookieDate,fromurl,action
action=Request("action")
if action<>"showindexlogin" and action<>"showjs" then
if oblog.checkuserlogined() then Response.Redirect("user_index.asp")
end if
username=oblog.filt_badstr(Trim(Request("username")))
password=Trim(Request.form("password"))
CookieDate=Trim(Request("CookieDate"))
fromurl=Trim(Request("fromurl"))
if username<>"" or Request("chk")="1" then
call sub_chklogin
else
if action="showindexlogin" then
call sub_showindexlogin()
elseif action="showjs" then
blogurl=oblog.CacheConfig(3)
call sub_showindexlogin()
else
call sub_showlogin()
end if
end If
Set oblog = Nothing
sub sub_showlogin()
%>
<%
end sub
sub sub_chklogin()
dim ajax,rearr,gohref
'set ajax=new AjaxXml
if oblog.CacheConfig(29)=1 then
if not oblog.codepass then oblog.adderrstr("验证码错误!")
end If
If oblog.Chkiplock() Then
oblog.ShowMsg ("对不起!你的IP已被锁定,不允许操作!"),blogdir &"index.html"
Set oblog = Nothing
End If
if UserName="" then oblog.adderrstr("登录用户名不能为空!")
if Password="" then oblog.adderrstr("登录密码不能为空!")
if oblog.errstr<>"" then
rearr=split(Replace(oblog.errstr,"_","\n")&"$$1","$$")
Response.Write ""
Response.End()
'ajax.re(rearr)
'Response.end
end if
if CookieDate="" then CookieDate=0 else CookieDate=CLng(CookieDate)
' password=md5(password)
if Is_ot_User=1 then
call ot_chklogin()
Else
oblog.ob_chklogin UserName,MD5(password),CookieDate
If API_Enable Then
Dim blogAPI
Set blogAPI = New DPO_API_OBLOG
blogAPI.LoadXmlFile True
blogAPI.UserName=username
blogAPI.PassWord=password
blogAPI.CookieDate=CookieDate
blogAPI.userip=oblog.userip
Call blogAPI.ProcessMultiPing("login")
Set blogAPI=Nothing
Dim strUrl,i,turl
For i=0 To UBound(aUrls)
strUrl=aUrls(i)
if CookieDate=0 then CookieDate=3
If Left(strUrl,7)="http://" Then
turl=strUrl&"?syskey="&MD5(UserName&oblog_Key)&"&username="&UserName&"&password="&MD5(PassWord)&"&savecookie="&CookieDate & "@@@"& turl
End If
Next
session("turl")=turl
Dim trearr
trearr="$$"&MD5(username & oblog_Key )&"$$"&username&"$$"&MD5(password)
End If
End If
if oblog.errstr<>"" then
rearr=split(Replace(oblog.errstr,"_","\n")&"$$1","$$")
Response.Write ""
Response.End()
'ajax.re(rearr)
'Response.end
end if
if fromurl<>"" then
gohref=Replace(fromurl,"&","$")
rearr=split("登录成功!$$2$$"&gohref & trearr,"$$")
else
if action="showindexlogin" then
gohref=oblog.comeurl
else
gohref="user_index.asp"
end if
end if
rearr=split("登录成功!$$2$$"&gohref & trearr,"$$")
if rearr(1)=2 Then
If InStr (rearr(2),"user_index.asp")>0 Then
Response.Redirect(rearr(2))
Else
Response.Redirect(Replace(rearr(2),"$","&"))
End if
else
Response.Write ""
end if
'ajax.re(rearr)
'Response.End
end Sub
sub ot_chklogin()
dim sql,rs,rsreg
Dim ajax,rearr
set ajax=new AjaxXml
Dim TruePassWord
TruePassWord = RndPassword(16)
if not IsObject(ot_conn) then link_database
sql="select * from "&ot_usertable&" where "&ot_username&"='"& username & "' and "&ot_password&" ='" & md5(password) &"'"
set rs=ot_conn.execute(sql)
if rs.bof and rs.eof then
set rs=nothing
if isobject(ot_conn) then ot_conn.close:set ot_conn=nothing
oblog.adderrstr("用户名或密码错误,请重新输入!!")
exit sub
else
set rsreg=Server.CreateObject("adodb.recordset")
rsreg.open "select * from [oblog_user] where username='"& username &"'",conn,1,3
if rsreg.eof then
dim reguserlevel
If oblog.CacheConfig(18) = 1 Then reguserlevel = 6 Else reguserlevel = 7
set rsreg=Server.CreateObject("adodb.recordset")
rsreg.open "select top 1 * from [oblog_user]",conn,1,3
rsreg.addnew
rsreg("username")=username
rsreg("password")=MD5(password)
rsreg("TruePassWord") = TruePassWord
rsreg("user_dir")=oblog.setup(8,0)
rsreg("user_level")=reguserlevel
rsreg("lockuser")=0
rsreg("en_blogteam")=1
rsreg("adddate")=oblog.ServerDate(Now())
rsreg("regip")=oblog.userip
rsreg("lastloginip")=oblog.userip
rsreg("lastlogintime")=oblog.ServerDate(now())
rsreg("user_group") = oblog.defaultGroup
rsreg("scores") = oblog.cacheScores(1)
rsreg("newbie") = 1
if oblog.CacheConfig(40)=1 then rsreg("comment_isasc")=1
If oblog.chkdomain(UserName)=False Then
rsreg("Nickname")=UserName
End If
rsreg.update
oblog.execute("update oblog_user set user_folder=userid where username='"&username&"'")
oblog.execute("update oblog_setup set user_count=user_count+1")
rsreg.close
set rsreg=nothing
oblog.SaveCookie username,TruePassWord,0
oblog.CreateUserDir username,1
set rs=Nothing
'rearr=split("您是第一次激活blog系统,请完善blog资料!$$2$$user_index.asp","$$")
oblog.ShowMsg "您是第一次激活blog系统,请完善blog资料!","user_index.asp"
'ajax.re(rearr)
Response.End
Else
If rsreg("lockuser") = 1 Then
rsreg.Close: Set rsreg = Nothing
oblog.ShowMsg ("对不起!你的ID已被锁定,不能登录!")
Exit Sub
Else
If rsreg("password")<>MD5(password) Then rsreg("password")=MD5(password)
rsreg("LastLoginIP")=oblog.userip
rsreg("LastLoginTime")=oblog.ServerDate(Now())
rsreg("LoginTimes")=rsreg("LoginTimes")+1
rsreg("TruePassWord") = TruePassWord
rsreg.update
End if
end if
rsreg.close
set rsreg=nothing
set rs=nothing
if isobject(ot_conn) then ot_conn.close:set ot_conn=nothing
oblog.SaveCookie username,TruePassWord,CookieDate
end if
end sub
sub sub_showindexlogin()
dim show_userlogin
if oblog.CheckUserLogined()=False then
if Request("n")="1" then '横向登录口
show_userlogin="" & vbcrlf
Else '竖向登录口
show_userlogin="" & vbcrlf
end If
Else
if Request("n")="1" then '横向登录后状态
show_userlogin="
" & vbcrlf
end If
If API_Enable Then
If session("turl")<>"" Then
Dim arrturl,i,turl,scrurl
turl=Replace(session("turl"),"$","&")
arrturl=Split(turl,"@@@")
For i=0 To UBound(arrturl)
If arrturl(i)="" Then Exit For
scrurl= scrurl& "" & vbcrlf
'scrurl= scrurl& "" & vbcrlf
Next
response.Write("document.write('"&Replace(Replace(Replace(Replace(scrurl,"\","\\"),"'","\'"),VbCrLf,"\n"),chr(13),"")&"');")
Response.Flush
session("turl")=""
End if
End if
end if
Response.Write oblog.htm2js_div(show_userlogin,"ob_login")
end sub
%>