%@ Language=VBScript %><% Option Explicit session.codepage=65001 if request.form("Logout")="Logout" Then session.Abandon session("username")="" end If %><% 'response.write session("tapchi") If request.Form("username") <> "" Then dim AdminID , AdminPass, message, myrs AdminID =request.Form("username") AdminPass =request.Form("pssword") set myrs = server.createobject("ADODB.recordset") myrs.open "select * from users where status=1 and func2=1 and username ='" & AdminID & "' and passwrd ='"& HashEncode(AdminPass) &"'" ,myconn,3 if myrs.EOF Then message="Sai bí danh, mật khẩu hoặc không có quyền" Else session("username")=AdminID session("pass")=AdminPass session("tapchi") = myrs("func2") end if set myrs = Nothing End If %><% Dim snam, sBai, namTimKiem, baiTimKiem Dim strDanhSachBai, strDanhSachNam Dim pHienThi,sTimKiem snam = request.Form("Nam") sBai = request.Form("P_SO_BAO") sTimKiem = request.form("txtSearch") if snam <> "" then pHienThi = "Y" 'Chuoi tu khoa tim kiem Dim strSQL strSQL = "SELECT * from magaz_dtl WHERE id > 0 " if snam <> "" then strSQL = strSQL & " AND Nam = "& snam end if if sBai <> "" then strSQL = strSQL & " AND So_bao = "& sbai end if if sTimKiem <> "" then strSQL = strSQL & " AND ( tom_tat like '%" & sTimKiem & "%'" strSQL = strSQL & " OR keyword like '%" & sTimKiem & "%'" strSQL = strSQL & " OR author like '%" & sTimKiem & "%') " end if Dim ID, Title, Author,SoBao,PDFSource dim ObjRS set ObjRS = server.createobject("ADODB.recordset") ObjRS.open strSQL,myconn,1,3 else pHienThi = "N" end if strDanhSachBai = inDSachNam(snam) strDanhSachNam = writeoptiontag("SELECT DISTINCT Nam from magaz_dtl" ,"Nam","Nam", snam) %>