首页index.php源码

时间:2006-10-10 20:30:51  类别:php源码  作者:zl667061

<?
include_once("inc/reg_check.php");
if($OA_REG_ON!=2)
exit;
include_once("inc/conn.php");
include_once("inc/utility.php");
include_once("inc/utility_all.php");
session_start();
ob_start();
$CUR_TIME=date("Y-m-d H:i:s",time());
?>
<html>
<head>
<title>系统登录</title>
<script language="Javascript" src="common/allload.inc"></script>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="stylesheet" type="text/css" href="/theme/1/style.css">
</head>
<body topmargin="5">
<?
if($USERNAME=="")
{
$LOGIN_ERROR="请输入用户名!";
Message("警告",$LOGIN_ERROR);
exit;
}
//-------- 取系统设置参数 --------
$query = "SELECT * from SYS_PARA where PARA_NAME='SEC_PASS_FLAG' or PARA_NAME='SEC_PASS_TIME' or PARA_NAME='SEC_PASS_IMG'";
$cursor= exequery($connection,$query);
while($ROW=mysql_fetch_array($cursor))
{
$PARA_NAME=$ROW["PARA_NAME"];
$PARA_VALUE=$ROW["PARA_VALUE"];
if($PARA_NAME=="SEC_PASS_FLAG")
$SEC_PASS_FLAG=$PARA_VALUE;
else if($PARA_NAME=="SEC_PASS_TIME")
$SEC_PASS_TIME=$PARA_VALUE;
else if($PARA_NAME=="SEC_PASS_IMG")
$SEC_PASS_IMG=$PARA_VALUE;
}
//-------- 验证用户输入图形验证码 ----------
if($SEC_PASS_IMG=="1")
{
if(isset($PASSWORD2)&&session_is_registered("PASS_IMG_NUM"))
{
if(crypt($PASSWORD2,$PASS_IMG_NUM)!=$PASS_IMG_NUM)
{
$LOGIN_ERROR="图形验证码错误!";
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
}
else
{
$LOGIN_ERROR="图形验证码错误!";
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
}
//-------- IP检验 --------
$USER_IP=$_SERVER["REMOTE_ADDR"];
if(!check_ip($USER_IP,"0"))
{
add_log(9,"USER_ID=$USERNAME",$USERNAME);
Message("警告","您无权限从该IP(".$USER_IP.")登录!");
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
//-------- 升级 --------
$OA_UPDATE_FILE="update/1.php";
if(file_exists($OA_UPDATE_FILE))
{
include_once($OA_UPDATE_FILE);
unlink($OA_UPDATE_FILE);
}
//--------- 密码验证 --------
$LOGIN_ERROR="用户名或密码错误(注意大小写),请重新登录!";
$connection=OpenConnection();
$query = "SELECT * from USER where USER_ID='$USERNAME'";
$cursor= exequery($connection,$query);
if(!$ROW=mysql_fetch_array($cursor))
{
add_log(10,"USER_ID=$USERNAME",$USERNAME);
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
$USER_ID=$ROW["USER_ID"];
if($USERNAME!=$USER_ID)
{
add_log(10,"USER_ID=$USERNAME",$USERNAME);
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
$PWD=$ROW["PASSWORD"];
$LOGIN_USER_PRIV=$ROW["USER_PRIV"];
$LOGIN_AVATAR=$ROW["AVATAR"];
$LOGIN_DEPT_ID=$ROW["DEPT_ID"];
$MENU_TYPE=$ROW["MENU_TYPE"];
$LAST_PASS_TIME=$ROW["LAST_PASS_TIME"];
$LOGIN_THEME=$ROW["THEME"];
$PAUSE=$ROW["PAUSE"];
$MENU_TYPE=2-$MENU_TYPE;
if(crypt($PASSWORD,$PWD)!= $PWD)
{
$ERROR_PWD=maskstr($PASSWORD,2,1);
add_log(2,$ERROR_PWD,$USERNAME);
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
if($PAUSE == 1)
{
$LOGIN_ERROR="用户帐户已经被停用";
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
$LOGIN_USER_ID=$USER_ID;
session_register("LOGIN_USER_ID");
session_register("LOGIN_USER_PRIV");
session_register("LOGIN_DEPT_ID");
session_register("LOGIN_AVATAR");
session_register("LOGIN_THEME");
setcookie ("USER_NAME_COOKIE", $LOGIN_USER_ID,time() + 60*60*24*1000);
//-------- 检查密码是否过期 --------
if($SEC_PASS_FLAG=="1"&&(time()-strtotime($LAST_PASS_TIME) >=$SEC_PASS_TIME*24*3600))
header("location: general/pass.php");
//-------- 日志 --------
add_log(1,"",$LOGIN_USER_ID);
//-------- 根据日程安排生成短信息 --------
affair_sms();
//-------- 生成通知管理提醒信息 --------
affair_notify_sms();
//--------增加在线人员------------------
//user_add_online();
?>
<script>
var open_flag=window.open("general/index.php",'<?=md5($USERNAME)?>',"toolbar=<?=$MENU_TYPE?>,fullscreen=no, menubar=yes, scrollbars=no, resizable=no, location=no, status=no,width=' + window.screen.width + ',height=' + window.screen.height + ',top=0,left=0");
if(open_flag== null)
location="general/index.php";
else
{
focus();
window.opener =window.self;
window.close();
}
</script>
</body>
</html>


特别推荐

广而告之