心动吧黑客BLOG

没作者信息.....

更新后的代码修改了之前后台绕过的方式。
利用随机函数

Sub chklogin 
        dim sql,rs 
        dim M_Name,loginValidate 
        M_Name = GetCookie("AdminName") 
        M_Name = replace(M_Name,"'","") 
        on error resume next 
        set rs = Database.GetRecordDetail("Tbl_Manager","M_Name='" & M_Name &"'") 
         
        loginValidate = md5(rs("M_Random") & rs("M_Name") & rs("M_ID")) ''''''''''''''这里是利用 随机数+用户名+id号。 
         
        if err then 
                SetCookie "check","",30 
            writeend "<script>top.location.href='index.asp?action=login';</script>" 
        end if 
         
        if GetCookie("check") <> loginValidate then ''''不等于则返回登录页面 
           SetCookie "check","",30 
           writeend "<script>top.location.href='index.asp?action=login';</script>" 
        end if 
        '''''''到这里也就可以算登陆了。 
End Sub

Function GetIP() 
        Dim addr, x, y 
        x = Request.ServerVariables("HTTP_X_FORWARDED_FOR") 
        y = Request.ServerVariables("REMOTE_ADDR") 
        addr = IIF(isN(x) or lCase(x)="unknown",y,x) 
        If InStr(addr,".")=0 Then addr = "0.0.0.0" 
        GetIP = addr 
End Function