login.asp

自动化网络办公系统全部源码officeanywheresystem

<%
'--------------------------------------------------------------------------
'      Project: AMBER SOFT [OA]V2
'      Module : Member
'      By: Imafar
'      Discription: Login
'--------------------------------------------------------------------------
	'------设置-------
	'Option Explicit
%>
<!--#include file="../../_inc/Generalado.asp" -->
<!--#include file="../../_inc/func.asp" -->

<%
	'------定义变量--------------
	Dim sAccount,sPassword
	'------获取form中提交的内容-----
	sAccount=Request.Form("account")
	sPassword=Request.Form("password")
	
	'response.write sPassword&"<br>"
	'----------打开数据表-----------
	'response.write "select * from USERINFO where account='"&sAccount&"' "
	oRs.open "select * from USERINFO where account='"&sAccount&"' and disable=0",oCon,2,3
	'----------判断账号与密码------------
	if Not oRS.eof then
		'response.write datafilter(sPassword,11,oRS("password"))
		'response.end
		if ((len(oRS("password"))=19 and datafilter(sPassword,11,oRS("password"))=oRS("password"))) or ((len(oRS("password"))<>19 and sPassword=oRS("password"))) then
			'----------将数据库中变量保存至会话级变量----
			session("userID")=oRS("ID")
			session("css")="/css/001/"
			'session("name")=oRS("name")
			'session("Authorized")=oRS("Authorized")
			'session("deptid")=oRS("dept")
			'session("account")=oRS("account")
			oRS("online")=1
			oRS("LoginTimes")=oRS("LoginTimes")+1
			oRS.update
			oRS.close
			oRS.open "select * from User_log where ID=0",oCon,2,3
			oRS.addnew
			oRS("user_id")=session("userid")
			oRS("DateTime")=now
			oRS("type")="Login"
			oRS("IP")=request.servervariables("REMOTE_ADDR")
			oRS.update
			oRS.close
			oCon.close
			set oRS=nothing
			set oCon=nothing
			'response.write session("userid")
			'response.end
			'-----------链接至首页-------------
			'response.redirect "/mainready.htm" 
			response.write "<SCRIPT LANGUAGE='JavaScript'>"&chr(13)
			response.write "<!--"&chr(13)
			response.write "top.leftFrame.location.href='/indexFrame-left.asp';"&chr(13)
			response.write "top.mainFrame.location.href='/logok.htm';"&chr(13)
			response.write "top.topFrame.location.href='/indexFrame-top.asp';"&chr(13)
			response.write "//-->"&chr(13)
			response.write "</SCRIPT>"&chr(13)
		else
			oRS.close
			'oCon.close
			set oRS=nothing
			'set oCon=nothing
			'------------显示密码出错信息------------
			ocon.execute("insert into user_log(type ,datetime,ip) values('login','"&now()&"','"&request.servervariables("REMOTE_ADDR")&"')")
			response.redirect "/error/error1.htm"
		end if
	else
		oRS.close
		'oCon.close
		set oRS=nothing
		'set oCon=nothing
		'------------显示账号出错信息------------
		'esponse.redirect "error/error.asp?errormsg=没有用户名"&str_account&",请核实!"
		ocon.execute("insert into user_log(type ,datetime,ip) values('login','"&now()&"','"&request.servervariables("REMOTE_ADDR")&"')")
		response.redirect "/error/error2.htm"
	end if
	%>