修补方法:修改commond.asp文件,找到:
[code]IF memName<>Empty Then
Dim CheckCookie
Set CheckCookie=Server.CreateObject("ADODB.RecordSet")
修补方法:修改commond.asp文件,找到:
[code]IF memName<>Empty Then
Dim CheckCookie
Set CheckCookie=Server.CreateObject("ADODB.RecordSet")
SQL="SELECT mem_Name,mem_Password,mem_Status,mem_LastIP FROM blog_Member WHERE mem_Name='"&memName&"' AND mem_Password='"&memPassword&"' AND mem_Status='"&memStatus&"'"
CheckCookie.Open SQL,Conn,1,1
SQLQueryNums=SQLQueryNums+1
If CheckCookie.EOF AND CheckCookie.BOF Then
Response.Cookies(CookieName)("memName")=""
memName=Empty
Response.Cookies(CookieName)("memPassword")=""
memPassword=Empty
Response.Cookies(CookieName)("memStatus")=""
memStatus=Empty
Else
If CheckCookie("mem_LastIP")<>Guest_IP Or isNull(CheckCookie("mem_LastIP")) Then
Response.Cookies(CookieName)("memName")=""
memName=Empty
Response.Cookies(CookieName)("memPassword")=""
memPassword=Empty
Response.Cookies(CookieName)("memStatus")=""
memStatus=Empty
End If
End IF
CheckCookie.Close
Set CheckCookie=Nothing
End IF[/code]
修改为:
[code]IF memName<>Empty Then
Dim CheckCookie
Set CheckCookie=Server.CreateObject("ADODB.RecordSet")
SQL="SELECT mem_Name,mem_Password,mem_Status,mem_LastIP FROM blog_Member WHERE mem_Name='"&memName&"' AND mem_Password='"&memPassword&"' AND mem_Status='"&memStatus&"'"
CheckCookie.Open SQL,Conn,1,1
SQLQueryNums=SQLQueryNums+1
If CheckCookie.EOF AND CheckCookie.BOF Then
Response.Cookies(CookieName)("memName")=""
memName=Empty
Response.Cookies(CookieName)("memPassword")=""
memPassword=Empty
Response.Cookies(CookieName)("memStatus")=""
memStatus=Empty
Else
If CheckCookie("mem_LastIP")<>Guest_IP Or isNull(CheckCookie("mem_LastIP")) Then
Response.Cookies(CookieName)("memName")=""
memName=Empty
Response.Cookies(CookieName)("memPassword")=""
memPassword=Empty
Response.Cookies(CookieName)("memStatus")=""
memStatus=Empty
End If
End IF
CheckCookie.Close
Set CheckCookie=Nothing
Else
Response.Cookies(CookieName)("memName")=""
memName=Empty
Response.Cookies(CookieName)("memPassword")=""
memPassword=Empty
Response.Cookies(CookieName)("memStatus")=""
memStatus=Empty
End IF[/code]