manage_chklogin.asp

学校网站管理系统,学校网站管理系统采用ASP+ACCESS编写而成

<%@language=vbscript codepage=936 %>
<!--#include file="Conn.asp"-->
<!--#include file="Inc/md5.asp" -->
<%
dim sql,rs
dim UserName,PassWord,CheckCode
UserName=replace(trim(request("UserName")),"'","")
PassWord=replace(trim(Request("PassWord")),"'","")
CheckCode=replace(trim(Request("CheckCode")),"'","")
if session("CheckCode")="" then
Response.Redirect "Sorry.asp"
end if
if CheckCode<>CStr(session("CheckCode")) then
Response.Redirect "Sorry.asp"
end if
if FoundErr<>True then
	password=md5(password)
	set rs=server.createobject("adodb.recordset")
	sql="select * from Manage_User where LockUser=False And UserName='" & UserName & "' And PassWord='" & PassWord & "'"
	rs.open sql,conn,1,3
	if rs.bof and rs.eof then
Response.Redirect "Sorry.asp"
	else
		if PassWord<>rs("PassWord") then
Response.Redirect "Sorry.asp"
		else
			rs("LastLoginIP")=Request.ServerVariables("REMOTE_ADDR")
			rs("LastLoginTime")=now()
			rs("LoginTimes")=rs("LoginTimes")+1
			rs.update
			session.Timeout=30
                        Session("name") =  rs("UserName")
                        Session("pwd") =  rs("PassWord")
                        Session("Module") =  rs("Module")
                        Session("Issuper") =  rs("Issuper")
			rs.close
			set rs=nothing
			call CloseConn()
			Response.Redirect "Tzstudent_Com.asp"
		end if
	end if
	rs.close
	set rs=nothing
end if
%>