主题:  关于进入后台的问题

笑三笑

职务:普通成员
等级:1
金币:0.0
发贴:25
注册:2002/11/18 20:20:05
#12004/2/2 10:36:24
我用一个登入页面进入后台管理区,有时候能进入后台的页面,但在有此机子上却出现了错误页面,它的提示是这样子的,
你好:
你的身份: 错误 '80020009'
发生意外。

/mx/leftadmin.asp,行101
下页是登入页面的处理程序:
<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="Connections/gbook.asp" -->
<%
dim username,password
username = Request("name"
password = Request("password"

Set cn = Server.CreateObject("ADODB.Connection"
cn.Open(MM_gbook_STRING)
set rs=server.CreateObject ("ADODB.Recordset"
sql = "Select * from admin where name = '" & username &"' and passward = '" & password &"'"
rs.open sql,cn,1,1
if (rs.eof or rs.bof) then '不存在那个用户名的时候,返回错误信息
    response.write "<script language=javascript>" & "alert('用户名或密码错误!');" & "history.back()" & "</script>"
    response.end
end if
    session("name"=username
    session("password"=password
%>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title></title>
<meta http-equiv="refresh" content="1;URL=admin.asp">
</head>

<body>
正在登入中,请稍后....
</body>
</html>
这个是出错页面的程序,帮我看看:
<%@ Language=VBScript%>
<!--#include file="Connections/gbook.asp" -->
<%
Set cn = Server.CreateObject("ADODB.Connection"
cn.Open(MM_gbook_STRING)
set rs=server.CreateObject ("ADODB.Recordset"
sql = "Select * from admin where name='"&session("name"&"'"
rs.open sql,cn,1,1
%>

    <td width="10"></td><td valign=top>
        
<div id=parent<%=i%> class=parent style="display='block'">
</div>
        
<div id=child<%=i%> class=child style="display='none'">
</div>    
        
         
     <div id=parent<%=i%> class=parent style="display='block'">
</div>
     <div id=child<%=i%> class=child style="display='none'">
</div>    
         
<div id=parent<%=i%> class=parent style="display='block'">
</div>
<div id=child<%=i%> class=child style="display='none'">
</div>    
        
''***********出错的地方就是这里:101行''     你好:<font color="#FF0000"><%= session("name" %></font><br>
你的身份:
     <%
     if rs("le"=3 then
     response.write "<font color='#FF0000'>超级管理员</font>"
     elseif rs("le"=2 then
     response.write "<font color='#FF0000'>中级管理员</font>"
     elseif rs("le"=1 then
     response.write "<font color='#FF0000'>普通管理员</font>"
     end if
     %>
<br>
你<font color="#000000">的IP:</font><font color="#FF0000"><%= request.servervariables("REMOTE_ADDR" %></font><br>
<br>
<%i=i+1%>
<div id=parent<%=i%> class=parent style="display='block'">
<table width="100%" border="0" cellspacing="0" cellpadding="0" height=20>
<tr>
<td width=15><a class=r1 href="#" onclick="expand(<%=i%>;return false;"><img src="admin/image/close.gif" width="9" height="16" border=0></a></td>
<td><a class=r1 href="#" onclick="expand(<%=i%>;return false;">网站管理</a></td>
</tr>
</table>
</div>
<div id=child<%=i%> class=child style="display='none'">
<table width=100%>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/titlemove.asp" target="mainFrame">标题管理</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/gonggao.asp" target="mainFrame">公告管理</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="ADMIN/aboutus.asp" target="mainFrame">网站资料</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="ADMIN/admindc.asp" target="mainFrame">调查管理</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="ADMIN/adminfile.asp" target="mainFrame">上传文件管理</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="address.asp" target="mainFrame">同学录管理</a></td>
</tr>
</table>
</div>    
<%i=i+1%>
<div id=parent<%=i%> class=parent style="display='block'">
<table width="100%" border="0" cellspacing="0" cellpadding="0" height=20>
<tr>
<td width=15><a class=r1 href="#" onclick="expand(<%=i%>;return false;"><img src="admin/image/close.gif" width="9" height="16" border=0></a></td>
<td><a class=r1 href="#" onclick="expand(<%=i%>;return false;">友情链接管理</a></td>
</tr>
</table>
</div>
<div id=child<%=i%> class=child style="display='none'">
<table width=100%>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/link.asp" target="mainFrame">修改链接</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/linkadd.asp" target="mainFrame">添加链接</a></td>
</tr>
</table>
</div>    
<%i=i+1%>
<div id=parent<%=i%> class=parent style="display='block'">
<table width="100%" border="0" cellspacing="0" cellpadding="0" height=20>
<tr>
<td width=15><a class=r1 href="#" onclick="expand(<%=i%>;return false;"><img src="admin/image/close.gif" width="9" height="16" border=0></a></td>
<td><a class=r1 href="#" onclick="expand(<%=i%>;return false;">系统管理员</a></td>
</tr>
</table>
</div>
<div id=child<%=i%> class=child style="display='none'">
<table width=100%>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/adminadd.asp" target="mainFrame">管理员添加</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/adminedit.asp" target="mainFrame">管理员删除</a></td>
</tr>
</table>
</div>    
<%i=i+1%>
<div id=parent<%=i%> class=parent style="display='block'">
<table width="100%" border="0" cellspacing="0" cellpadding="0" height=20>
<tr>
<td width=15><a class=r1 href="#" onclick="expand(<%=i%>;return false;"><img src="admin/image/close.gif" width="9" height="16" border=0></a></td>
<td><a class=r1 href="#" onclick="expand(<%=i%>;return false;">技术文章管理</a></td>
</tr>
</table>
</div>
<div id=child<%=i%> class=child style="display='none'">
<table width=100%>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/newstypeadd.asp" target="mainFrame">大类添加</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="admin/newsadd.asp" target="mainFrame">小类添加</a></td>
</tr>
<tr>
<td width=20>&nbsp;</td>
<td><a href="ADMIN/newsdel.asp" target="mainFrame">小类删除</a></td>
</tr>
</table>
</div>    
<%i=i+1%>
<div id=parent<%=i%> class=parent style="display='block'">
<table width="100%" border="0" cellspacing="0" cellpadding="0" height=20>
<tr>
<td width=15><a class=r1 href="#" onclick="expand(<%=i%>;return false;"><img src="admin/image/close.gif" width="9" height="16" border=0></a></td>
<td><a class=r1 href="javascript:windows.close()" onclick="expand(<%=i%>;return false;">退出管理</a></td>
</tr>
</table>
</div>
<div id=child<%=i%> class=child style="display='none'">
<table width=100%>
<tr>
<td width=20>&nbsp;</td>
<td><a href="ADMIN/exit.asp" target="mainFrame">注销用户</a></td>
</tr>
</table>
</div>    
<%i=i+1%>
<div id=parent<%=i%> class=parent style="display='block'"> </div>
<div id=child<%=i%> class=child style="display='none'"> </div>    
</td>
</tr>
</table>
</body>
</html>

<script language="javascript">
</script>



Syawn

职务:普通成员
等级:5
金币:10.0
发贴:2930
注册:2004/6/24 17:14:35
#22004/2/3 10:09:11
谁能来读你源文件呀。
写上操作步骤不行吗~



笑三笑

职务:普通成员
等级:1
金币:0.0
发贴:25
注册:2002/11/18 20:20:05
#32004/2/3 13:24:22
我做了一个登入页面进入后台管理区,但我发现有时候我能用session("name")=request("name")的值,而有时却是空的,空的时候就出错了,(一切设置都正常,表单页面也正确),有人说是sql注入错误,那到底是哪方面错误呢,