admin_login.asp

9seek 留言本源代码5.0版

<!--#include file="conn.asp"--> 
<%
dim name,pass, exec, rs
name=encodestr(request.form("name"))
pass=encodestr(request.form("pass"))

exec="select * from [user] where username='"&name&"' and userPassword='"&pass&"' and userClass=20"
Set RS = Server.CreateObject("ADODB.RecordSet") 
rs.Open exec, Conn, 1, 1
if rs.eof then
	rsclose()
	connclose()
	session("errmsg")="管理员账号错误！！！"
	response.redirect "admin_error.asp"
end if
rsclose()
connclose()
response.cookies("gbook")("username")=vbescape(name)
response.cookies("gbook")("password")=pass
response.redirect "admin_const.asp"
%>