igamebox
/
mtb_crm_asp


			
							123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113
							<?php
include "conn.php";

$act = $_GET['act'] ?? '';

if ($act == "logout") {
    // Clear all session variables
    addSession('loginid', '');
    addSession('loginuser', '');
    addSession('loginname', '');
    addSession('loginpower', '');
    session_destroy();
}

if ($act == "login") {
    checkPost();
    $loginuser = textEncode($_POST['loginuser'] ?? '');
    $loginpwd = textEncode($_POST['loginpwd'] ?? '');
    $logincode = $_POST['logincode'] ?? '';

    if ($loginuser == "") {
        echo "1";
        exit;
    }
    if ($loginpwd == "") {
        echo "2";
        exit;
    }
    if ($logincode != $_SESSION['zengscode']) {
        echo "3";
        exit;
    }


    $sql = "SELECT id, loginuser, loginpwd, loginstate, loginname, loginlasttime, loginlastip, 
            loginthistime, loginthisip, loginpower, logincount 
            FROM login WHERE loginuser = '" . mysqli_real_escape_string($conn, $loginuser) . "'";
    $result = mysqli_query($conn, $sql);
    
    if (mysqli_num_rows($result) == 0) {
        echo "4";
        exit;
    }
    
    $row = mysqli_fetch_assoc($result);

    if ($row['loginpwd'] != md5($loginpwd)) {
        echo "5";
        exit;
    }
    
    if ($row['loginstate'] < 1) {
        echo "6";
        exit;
    }
    
    // Check power status
    $sql = "SELECT COUNT(powerstate) as count, powerstate FROM power WHERE id = '" . mysqli_real_escape_string($conn, $row['loginpower']) . "' GROUP BY powerstate";
    $result = mysqli_query($conn, $sql);
    $power = mysqli_fetch_assoc($result);
    
    if (!$power || $power['count'] == 0 || $power['powerstate'] == 0) {
        echo "6";
        exit;
    }

    $_SESSION['zengscode'] = "";
    
    // Update login information
    $sql = "UPDATE login SET 
            loginlasttime = loginthistime,
            loginlastip = loginthisip,
            loginthistime = NOW(),
            loginthisip = '" . mysqli_real_escape_string($conn, getIp()) . "',
            logincount = logincount + 1
            WHERE id = '" . mysqli_real_escape_string($conn, $row['id']) . "'";
    mysqli_query($conn, $sql);
    
    // Set session variables

    addSession('loginid', $row['id']);
    addSession('loginuser', $row['loginuser']);
    addSession('loginname', $row['loginname']);
    addSession('loginpower', $row['loginpower']);


    echo "7";
    exit;
}
?>
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />
<link href="css/loginlayout.css" type="text/css" rel="stylesheet" />
<title><?php echo $webname; ?> - 网站后台管理</title>
<script language="javascript" src="js/jquery-1.7.2.min.js"></script>
<script type="text/javascript" src="js/loginjs.js"></script>
</head>
<body>
<div id="container">
    <form id="loginform" name="loginform" method="post">
        <div class="loginuser"><label for="loginuser">用户帐号：</label><input type="text" id="loginuser" name="loginuser" maxlength="50" /></div>
        <div class="loginpwd"><label for="loginpwd">用户密码：</label><input type="password" id="loginpwd" name="loginpwd" maxlength="50" /></div>
        <div class="logincode"><label for="logincode">验 证 码：</label><input type="text" id="logincode" name="logincode" maxlength="5" /><span id="showlogincode"></span></div>
        <div><input type="submit" id="loginbtn" name="loginbtn" value="登陆" /></div>
        <div id="formmsg"></div>
    </form>
    <div id="copyright">Copyright © Mietubl All Rights Reserved</div>
</div>
</body>
</html>