/beta/admin/login.asp

http://github.com/khaneh/Orders · ASP · 139 lines · 127 code · 10 blank · 2 comment · 18 complexity · cd0ac490477f46a4fd76bd455fcea365 MD5 · raw file 

    

  1. <%@LANGUAGE="VBSCRIPT" CODEPAGE="1256"%>

    2. 

  2. <% 'Response.Addheader "WWW-Authenticate", "BASIC" %>

    3. 

  3. <%

    4. 

  4. function sqlSafe (s)

    5. 

  5.   st=s

    6. 

  6.   st=replace(St,"'","`")

    7. 

  7.   st=replace(St,chr(34),"`")

    8. 

  8.   sqlSafe=st

    9. 

  9. end function

    10. 

  10. %>

    11. 

  11. <HTML>

    12. 

  12. <HEAD>

    13. 

  13. <meta http-equiv="Content-Type" content="text/html; charset=windows-1256">

    14. 

  14. <meta http-equiv="Content-Language" content="fa">

    15. 

  15. <style>

    16. 

  16. 	Table { font-size: 10pt;}

    17. 

  17. </style>

    18. 

  18. <TITLE>Login </TITLE>

    19. 

  19. <SCRIPT LANGUAGE="JavaScript">

    20. 

  20. <!--

    21. 

  21. var tempKeyBuffer;

    22. 

  22. function myKeyDownHandler(){

    23. 

  23. 	tempKeyBuffer=window.event.keyCode;

    24. 

  24. }

    25. 

  25. function myKeyPressHandler(){

    26. 

  26. //	alert (tempKeyBuffer)

    27. 

  27. 	if (tempKeyBuffer>=65 && tempKeyBuffer<=90){

    28. 

  28. 		window.event.keyCode=tempKeyBuffer+32;

    29. 

  29. 	}

    30. 

  30. 	else if(tempKeyBuffer==186){

    31. 

  31. 		window.event.keyCode=59;

    32. 

  32. 	}

    33. 

  33. 	else if(tempKeyBuffer==188){

    34. 

  34. 		window.event.keyCode=44;

    35. 

  35. 	}

    36. 

  36. 	else if(tempKeyBuffer==190){

    37. 

  37. 		window.event.keyCode=46;

    38. 

  38. 	}

    39. 

  39. 	else if(tempKeyBuffer==191){

    40. 

  40. 		window.event.keyCode=47;

    41. 

  41. 	}

    42. 

  42. 	else if(tempKeyBuffer==192){

    43. 

  43. 		window.event.keyCode=96;

    44. 

  44. 	}

    45. 

  45. 	else if(tempKeyBuffer>=219 && tempKeyBuffer<=221){

    46. 

  46. 		window.event.keyCode=tempKeyBuffer-128;

    47. 

  47. 	}

    48. 

  48. 	else if(tempKeyBuffer==222){

    49. 

  49. 		window.event.keyCode=39;

    50. 

  50. 	}

    51. 

  51. }

    52. 

  52. //-->

    53. 

  53. </SCRIPT>

    54. 

  54. </HEAD>

    55. 

  55. 

    56. 

  56. <BODY onLoad="document.all.UserName.focus();">

    57. 

  57. <TABLE cellspacing=0 cellpadding=0 width=300 height=150 style='border:4px solid <%=SelectedMenuColor%>;' dir=rtl align=center>

    58. 

  58. <TR>

    59. 

  59. 	<TD>

    60. 

  60. 		<font face="tahoma">

    61. 

  61. 		<%

    62. 

  62. 		if request("act")="æÑæÏ" then

    63. 

  63. '			conStr="DRIVER={SQL Server};SERVER=(local);DATABASE=sefareshat;UID=sefadmin; PWD=5tgb;"

    64. 

  64. conStr = "Provider=SQLNCLI10.1;Persist Security Info=False;User ID=sefadmin;Initial Catalog=jame;Data Source=.\sqlexpress;PWD=5tgb;"

    65. 

  65. 			'	conStr = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & Server.MapPath("kid.mdb")

    66. 

  66. 			

    67. 

  67. 			Set conn = Server.CreateObject("ADODB.Connection")

    68. 

  68. 			conn.open conStr

    69. 

  69. 

    70. 

  70. 			u = sqlSafe(request("UserName"))

    71. 

  71. 			p = sqlSafe(request("Password"))

    72. 

  72. 			Set RS1 = conn.Execute("SELECT * FROM [Users] WHERE [UserName]='" & u & "' AND  [Password]='" & p & "' ")

    73. 

  73. 			If (RS1.EOF) or (u<>"samimi" and u<>"mohammad" and u<>"kid" and u<>"vazehi" and u<>"zamani") Then

    74. 

  74. 				session.abandon

    75. 

  75. 			%>

    76. 

  76. 					<div align=center style='background-color: #FF8888;width:300' >ßÏßÇÑÈÑí íÇ ßáãå ÚÈæÑ ÇÔÊÈÇå ÇÓÊ&nbsp;</div><br><br>

    77. 

  77. 			<%else

    78. 

  78. 				session("AID")=RS1("ID")

    79. 

  79. 				session("ID")=RS1("ID")

    80. 

  80. 				session("CSRName") = RS1("RealName")

    81. 

  81. 

    82. 

  82. 				Set RS2 = conn.Execute("SELECT GLs.Name, GLs.ID, GLs.FiscalYear, UserDefaults.[User] FROM GLs INNER JOIN UserDefaults ON GLs.ID = UserDefaults.WorkingGL WHERE (UserDefaults.[User] = '"& RS1("ID") & "') OR (UserDefaults.[User] = 0) ORDER BY ABS(UserDefaults.[User]) DESC")

    83. 

  83. 				session("OpenGL")=RS2("id")

    84. 

  84. 				session("FiscalYear")=RS2("FiscalYear")

    85. 

  85. 				session("OpenGLName")=RS2("name")

    86. 

  86. 				RS2.close

    87. 

  87. 

    88. 

  88. 				RS1.close

    89. 

  89. 				conn.Close

    90. 

  90. 				

    91. 

  91. 				response.redirect "default.asp"

    92. 

  92. 			End If

    93. 

  93. 

    94. 

  94. 			conn.Close

    95. 

  95. 		elseif request.querystring("err")<>"" then 

    96. 

  96. 		%>

    97. 

  97. 					<div align=center style='background-color: #FF8888;width:300'><%=request.querystring("err")%>&nbsp;</div><br><br>

    98. 

  98. 		<%

    99. 

  99. 		end if

    100. 

  100. 		%>

    101. 

  101. 	</TD>

    102. 

  102. </TR>

    103. 

  103. <TR>

    104. 

  104. 	<TD>

    105. 

  105. 

    106. 

  106. 		<FORM METHOD=POST ACTION="login.asp">

    107. 

  107. 		<div dir='rtl' align = "center" >

    108. 

  108. 		<!--IMG SRC="images/khaneh.jpg" WIDTH="350" HEIGHT="20" BORDER=0 ALT=""-->

    109. 

  109. 

    110. 

  110. 		<TABLE>

    111. 

  111. 		<TR>

    112. 

  112. 			<TD colspan="2" align="center"></TD>

    113. 

  113. 		</TR>

    114. 

  114. 		<TR>

    115. 

  115. 			<TD> äÇã ßÇÑÈÑ </TD>

    116. 

  116. 			<TD><INPUT TYPE="text" NAME="UserName" onkeyDown="return myKeyDownHandler();" onKeyPress="return myKeyPressHandler();"></TD>

    117. 

  117. 		</TR>

    118. 

  118. 		<TR>

    119. 

  119. 			<TD> ÑãÒ ÚÈæÑ </TD>

    120. 

  120. 			<TD><INPUT TYPE="password" NAME="Password" onkeyDown="return myKeyDownHandler();" onKeyPress="return myKeyPressHandler();"></TD>

    121. 

  121. 		</TR>

    122. 

  122. 		<TR>

    123. 

  123. 			<TD></TD>

    124. 

  124. 			<TD><INPUT style="font-family:tahoma; width:100%;" TYPE="submit" name="act" value="æÑæÏ"></TD>

    125. 

  125. 		</TR>

    126. 

  126. 		</TABLE>

    127. 

  127. 		 <br>

    128. 

  128. 		&nbsp; 

    129. 

  129. 		<br>

    130. 

  130. 		</div>

    131. 

  131. 		</FORM>

    132. 

  132. 		<br>

    133. 

  133. 		</font>

    134. 

  134. 	</TD>

    135. 

  135. </TR>

    136. 

  136. </TABLE>

    137. 

  137. 

    138. 

  138. </BODY>

    139. 

  139. </HTML>
    140.