check.asp

网上订房

<!--#include file="conn.asp"-->
<%
dim uid ,upwd
uid=trim(Request.Form("uid"))
upwd=trim(Request.Form("pwd"))

set rs=server.createobject("adodb.recordset")
sqltext="select * from userb where userid='" & uid & "' and password='" & upwd & "'"
rs.open sqltext,conn,1,1

'查找数据库，检查用户名是否存在
if rs.recordcount >= 1 then 
      response.cookies("userloginok")=true
      session("pretime")=rs("pretime")
      strSQL="update userb set loginnum=loginnum+1,pretime=now() where userid='"&uid&"'"
	  conn.Execute strSQL
      Response.Redirect "UserInfo.asp?uid="+uid+""   
 	  response.end
 	  rs.close
	else
	 Response.Redirect "messagebox.asp?msg=您输入了错误的帐号或口令，请再次输入！" 
	 response.end
     rs.close
end if
%>