login.asp

一套集网上购物和商品管理为一体的强大的网上商店(商城)系统

<!--#include file="conn.asp" -->
<!--#include file="md5.asp"-->
<%
'url=request.servervariables("HTTP_REFERER")
userid=trim(Request.form("userid"))
password=Request.form("password")
verifycode=trim(Request.form("verifycode"))
'/////验证码开始
if cstr(session("getcode"))<>cstr(verifycode) then
response.Write "<script LANGUAGE='javascript'>alert('请输入正确的验证码！');history.go(-1);</script>"
response.end
end if
'/////验证码结束

sql="select * from Net008_user where userid='"&cstr(userid)&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,3,2
if rs.recordcount=0 then
  response.write "<script>alert('此用户名不存在！');</script>"
  response.write "<script>this.location.href='login_window.asp';</script>"
  response.end
end if
if rs("password")<>md5(trim(password)) then
   response.write "<script>alert('用户密码错误，请重新输入！');</script>"
   response.write "<script>this.location.href='login_window.asp';</script>"
   response.end
else
  session("userid")=rs("userid")
  session("userlevel")=rs("userlevel")
  session("email")=rs("email")
  session("logindate")=rs("logindate")
  
  rs("logindate")=now()
  rs("loginnumber")=rs("loginnumber")+1
  rs.update
end if
rs.close
set rs=nothing
response.redirect "my_orderlist_temp.asp"
 %>