check.asp

c++builder开发系统实现了成绩查寻

<%@LANGUAGE="JAVASCRIPT" CODEPAGE="936"%>
<!--#include file="Connections/conn1.asp" -->
<%
var rs__adminname1 = String(Request("adminname"));
var rs__adminpsd1 = String(Request("adminpsd"));
var rs__userno1 =String(Request("userno"));
var rs__userpsd1 = String(Request("userpsd"));
if(rs__adminname1==""&&rs__userno1 !="")
{
     var rs = Server.CreateObject("ADODB.Recordset");
     rs.ActiveConnection = MM_conn1_STRING;
     rs.Source = "SELECT userno,userpsd  FROM user  WHERE userno='"+rs__userno1+ "' AND userpsd='"+rs__userpsd1+ "'";
     rs.CursorType = 0;
     rs.CursorLocation = 2;
     rs.LockType = 1;
     rs.Open();
     if(rs.EOF||rs.BOF)
        {Response.Write("<script language='javascript'>window.alert('您输入的用户名或密码有误');history.go(-1);</script>");
	     Response.End();}
     if(!rs.EOF && !rs.BOF)
       {
        Session("userno")= rs.Fields.Item("userno").Value;
	    Session("userpsd")=rs.Fields.Item("userpsd").Value;
		Session("rank")="norank";
		Session("passed")=12287666342;
		Response.Redirect("main.asp");
	    } 
  }

if(rs__adminname1!=""&&rs__userno1 =="")
{
     var rs = Server.CreateObject("ADODB.Recordset");
     rs.ActiveConnection = MM_conn1_STRING;
     rs.Source = "SELECT adminname, adminpsd, rank,power,classid  FROM admin  WHERE adminname='"+rs__adminname1+ "' AND adminpsd='"+rs__adminpsd1+ "'";
     rs.CursorType = 0;
     rs.CursorLocation = 2;
     rs.LockType = 1;
     rs.Open();
     if(rs.EOF || rs.BOF)
        {Response.Write("<script language='javascript'>window.alert('您输入的用户名或密码有误');history.go(-1);</script>");
	     Response.End();}
     if(!rs.EOF && !rs.BOF)
       {
        Session("adminname")= rs.Fields.Item("adminname").Value;
	    Session("adminpsd")=rs.Fields.Item("adminpsd").Value;
	    Session("rank")=rs.Fields.Item("rank").Value;	
		Session("power")=rs.Fields.Item("power").Value;
		Session("passed")=12287666342;
		Session("ranage")=rs.Fields.Item("classid").Value;	         
	  Response.Redirect("main.asp");
			
        } 
  }
%>
<%
rs.Close;
%>