userchk.asp

管理登录system 管理员：admin 密码：admin888 数据库链接文件： conn.asp 内容数据库前台链接文件 systemconn.asp 内容数据库后台链接文件 sy

<!--#include file="System/MD5.asp" -->
<!--#include file="Conn.asp" -->
<%
UserName=trim(request.Form("UserName")) 
PassWord=trim(request.Form("PassWord")) 
if len(UserName)<2 or isempty(UserName) or len(UserName)>10  then
   response.write "<script language=javascript> alert('正确的用户名应该是由2-10位字符串!');history.back(-1);</script>"
   response.end
end if 
if len(PassWord)<6 or isempty(PassWord)  then
   response.write "<script language=javascript> alert('密码不足6位字符无法确认!');history.back(-1);</script>"
   response.end
end if 
PassWord=MD5(PassWord)
set rs = server.createobject("adodb.recordset")
SQL="select * from UserInfo where Uname='"&UserName&"' order by id desc"
rs.open SQL,conn,1,1
if not rs.eof then
   Uname=rs("Uname")
   Upass=rs("Upass")
   GroupID=rs("GroupID")
end if
Rs.Close
set Rs=nothing
%>

<%
if UserName<>Uname then
   Session("My_Login")=""
   Session("GroupLevel")=""
   response.write "<script language=javascript> alert('用户名有误!');history.back(-1);</script>"
   response.end
end if 

if PassWord<>Upass then
   session("My_Login")=""
   Session("GroupLevel")=""
   response.write "<script language=javascript> alert('输入的密码有误!');history.back(-1);</script>"
   response.end
end if 

if UserName=Uname then
   if Password=Upass then
      session("My_Login")="My_Login_Succeed"
	  session("Uname")=Uname
         set Rs = server.createobject("adodb.recordset")
         SQL="select GroupLevel from Nweb_UGroup where GroupID='"&GroupID&"'"
         Rs.open SQL,conn,1,1
      Session("GroupLevel")=Rs("GroupLevel")
         Rs.Close
         set Rs=nothing
	  session.Timeout=10
	  response.write "<script language=javascript> alert('登录成功!');</script>"
      response.redirect request.servervariables("http_referer")
      response.end
   else
      session("My_Login")=""
	  response.write "<script language=javascript> alert('输入的密码有误!');history.back(-1);</script>"
      response.end
   end if
else
   session("My_Login")=""
   response.write "<script language=javascript> alert('用户名有误!');history.back(-1);</script>"
   response.end
end if 
%>