login.asp

这是一个关于企业物流平台的东东

<!--#include file=conn/co.asp-->
<% 
if request("action")="login" then
	username=request("username")
	userpwd=request("userpwd")
			username=trim(request("username"))
			password=trim(request("userpwd"))
        for i=1 to len(username)
        user=mid(username,i,1)
        if user="'" or user="%" or user="<" or user=">" or user="&" or user="|" then
			response.write "<script language=JavaScript>" & "alert('您的用户名含有非法字符,请重新输入！');" & "history.back()" & "</script>"
			response.end
        end if
        next
       for i=1 to len(password)
       pass=mid(password,i,1)
       if pass="'" or pass="%" or pass="<" or pass=">" or upass="&" or pass="|" then
		   response.write "<script language=JavaScript>" & "alert('您的密码含有非法字符,请重新输入！');" & "history.back()" & "</script>"
		   response.end
       end if
       next%>
<%
set rs=server.createobject("adodb.recordset")
sql="select * from fuser where username='"&username&"' and userpwd='"&userpwd&"'"
rs.open sql,conn,1,3
    if rs.eof then
        response.write "<br><br><br><br><font size=2><center>对不起，您输入的用户名或者密码密码有误！<a href=chaxun.asp>返回</a>"
    else
        session("username")=request("username")
        session("loc")=1
        response.Redirect("chaxunguan.asp")
		
	end if 
rs.close
set rs=nothing
conn.close
set conn=nothing
end if
%>