WAP中利用截取手机号码达到自动登入的一段源码

<%
t1=timer()
usephones=Request.ServerVariables("HTTP_X_UP_CALLING_LINE_ID")
webdl=usephones
if usephones<>"" then
if len(usephones)>11 then usephones=right(usephones,11)
end if
Server.ScriptTimeout=999
If usephones=13800138000 or usephones=113800138000 or usephones=13800138000 or usephones=13800138000 or usephones=13800138000 or usephones=13800138000 then
Session("Counter")="pass_numbers_56431290"
End if
if Session("ltfsid")="ksjrh_jae56_hge654dgdd" then
response.redirect "/index.asp"
response.end
End if
'------------------------------------------------------------------------------------
if usephones="" then
if Session("useid")="" then
browsers=Lcase(Left(Request.ServerVariables("HTTP_USER_AGENT"),4))
if browsers="oper" or browsers="winw" or browsers="wapi" or browsers="mc21" or browsers="up.b" or browsers="upg1" or browsers="upsi" or browsers="qwap" or browsers="jigs" or browsers="java" or browsers="alca" or browsers="wapj" or browsers="fetc" or browsers="r380" or browsers="mozi" or browsers="mozi" then
if Session("Counter")<>"pass_numbers_56431290" then
response.redirect "/index.asp"
response.end
End if
end if
response.redirect "/lt/reg/ltdl.asp"
response.end
end if
end if
'----------------------------------------------------------------------------------
if Session("Counter")="pass_numbers_56431290" and usephones<>"" and Session("useid")="" then
sql="select * from usereg where CStr(usephone)='" & usephones & "'"
set rs=conn.execute(sql)
if Not rs.eof then
Session("ltname")=rs("usename")
Session("useid")=rs("id")
Session("showjd")=rs("jdshow")
if CStr(rs("ftsdbz"))="t" then
Session("ltfsbz")="sdfghdfg_dfg45fg45_6554"
else
Session("ltfsbz")=""
End if
if CStr(rs("lysdbz"))="t" then
Session("ltlybz")="dfg34fdf_dfg554ghy_3452"
else
Session("ltlybz")=""
End if
if CStr(rs("ftsdbz"))="x" then
Session("ltfsid")="ksjrh_jae56_hge654dgdd"
response.redirect "/index.asp"
else
Session("ltfsid")=""
End if
if CStr(rs("bzbz"))<>"0" then
Session("ltglzdl")=rs("bzbz")
else
Session("ltglzdl")=""
End if
Session.Timeout=10
set rs=nothing
end if
end if
'----------------------------------------------------------------------------------
if Session("Counter")<>"pass_numbers_56431290" and usephones<>"" then
'----------------------------------------------------------------------------------
sql="select * from usereg where CStr(usephone)='" & usephones & "'"
set rs=conn.execute(sql)
if Not rs.eof then
Session("ltname")=rs("usename")
Session("useid")=rs("id")
Session("showjd")=rs("jdshow")
if CStr(rs("ftsdbz"))="t" and Session("Counter")<>"pass_numbers_56431290" then
Session("ltfsbz")="sdfghdfg_dfg45fg45_6554"
else
Session("ltfsbz")=""
End if
if CStr(rs("lysdbz"))="t" and Session("Counter")<>"pass_numbers_56431290" then
Session("ltlybz")="dfg34fdf_dfg554ghy_3452"
else
Session("ltlybz")=""
End if
if CStr(rs("ftsdbz"))="x" and Session("Counter")<>"pass_numbers_56431290" then
Session("ltfsid")="ksjrh_jae56_hge654dgdd"
response.redirect "/index.asp"
else
Session("ltfsid")=""
End if
if CStr(rs("bzbz"))<>"0" then
Session("ltglzdl")=rs("bzbz")
else
Session("ltglzdl")=""
End if
Session.Timeout=10
set rs=nothing
else
sql="insert into usereg(usephone) values (" & usephones &")"
conn.execute(sql)
set rs=nothing
sql="select * from usereg where CStr(usephone)='" & usephones & "'"
set rs=conn.execute(sql)
Session("ltname")=rs("usename")
Session("useid")=rs("id")
Session("showjd")=rs("jdshow")
if CStr(rs("ftsdbz"))="t" and Session("Counter")<>"pass_numbers_56431290" then
Session("ltfsbz")="sdfghdfg_dfg45fg45_6554"
End if
if CStr(rs("lysdbz"))="t" and Session("Counter")<>"pass_numbers_56431290" then
Session("ltlybz")="dfg34fdf_dfg554ghy_3452"
else
Session("ltlybz")=""
End if
if CStr(rs("ftsdbz"))="x" and Session("Counter")<>"pass_numbers_56431290" then
Session("ltfsid")="ksjrh_jae56_hge654dgdd"
response.redirect "/index.asp"
else
Session("ltfsid")=""
End if
if CStr(rs("bzbz"))<>"0" then
Session("ltglzdl")=rs("bzbz")
else
Session("ltglzdl")=""
End if
Session.Timeout=10
response.redirect "/lt/reg/new.asp"
set rs=nothing
End if
End if
%>