passcheck1.asp

该系统是宿舍管理系统

<%
dim user
user=Request.QueryString("user")
session("user")=user
set rs1=Server.CreateObject("ADODB.Recordset")
  sql1="select * from user where user ='"&session("user")&"'"
  rs1.open sql1,conn,1,1
dim kind
kind = rs1("kind")
if kind ="" then
response.write("<script>alert('对不起，您输入的网址有错误或者该日记本为加密日记本！')</script>") 
server.transfer("login.asp")
end if
dim passcheck
if session("user") <> rs1("user") or session("password") <> rs1("password") then
passcheck = 1
else
passcheck = 2
end if
if kind = 2 and passcheck = 1 then
response.write("<script>alert('本日记本不是公开日记本，您没有权利访问！请登陆！')</script>")
server.transfer("login.asp")
end if
rs1.close
set rs1=nothing
%>