checklogin.asp

医院专家挂号系统设计

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="inc\adovbs.asp"-->
<!--#include file="Inc/Conn.asp"-->
<!--#include file="inc\md5.asp"-->
<!--#include file="inc\SQLCHK.asp"-->
<% 
'通过提交位置判断是否是用户本地提交
dim server_v1
dim server_v2
server_v1=Cstr(Request.ServerVariables("HTTP_REFERER")) 
server_v2=Cstr(Request.ServerVariables("SERVER_NAME")) 
if mid(server_v1,8,len(server_v2))<>server_v2 then 
	response.write "<br><br><center><table border=0 cellpadding=20 width=450>" 
	response.write "<tr><td>" 
	response.write "不要外部提交,跳过Http提交吧!" 
	response.write "</td></tr></table></center>" 
	response.end 
end if 

dim clName,clPwd
clName=Request.Form("username")
clPwd=MD5(Request.Form("password"))

'从数据库中查询用户名和密码是否正确
dim RS
set RS=Server.CreateObject("ADODB.RecordSet")
RS.ActiveConnection=Conn
RS.Source = "Select * From [USER] Where username='"&clName&"' and password = '"&clPwd&"'"
RS.CursorType = adOpenKeyset
RS.CursorLocation = adUseServer
RS.LockType = adLockReadOnly
RS.Open
'没有查询到正确记录~
if RS.EOF or RS.BOF then
	Response.write "<Script Language='JavaScript'>"
	Response.write "alert('密码或者用户错误!');"
	Response.write "javascript:history.go(-1);"
	Response.write "</Script>"
	Response.end
else
'记录到客户端对象中
	Session("Username")=clName
	Session("Password")=clPwd	
	Session("PatientID")=RS("ID")
	Session.Timeout = 60
	Response.Redirect("Index.asp")
end if
RS.close
Set RS = nothing
CloseConn()
%>