chkuser_login.asp

设计考虑校园电子商务模式

<%
'****************************************************
' 多多校园                      Power by ddtaobao.com
' Email:[e-mail]               OICQ:136465584 
' Web: http://www.ddtaobao.com              作者:多多
' 校园、企业、医院、公司程序定做，系统开发，网站制作!
' Copyright (C) 2007 ddtaobao.com All Rights Reserved
'****************************************************
%>
<!--#include file="ddtaobao.asp" -->
<!--#include file="Inc/MD5.asp"-->
<!--#include file="Inc/MsgBox.asp"-->
<%
'****************************************************
' 多多校园                      Power by ddtaobao.com
' Email:[e-mail]               OICQ:136465584
' Web: http://www.ddtaobao.com              作者:多多
' 校园、企业、医院、公司程序定做，系统开发，网站制作!
' Copyright (C) 2007 ddtaobao.com All Rights Reserved
'****************************************************
if request("username")="" then
response.write "<script language='javascript'>" & VbCRlf
response.write "alert('用户名不能为空!');" & VbCrlf
response.write "history.go(-1);" & vbCrlf
response.write "</script>" & VbCRLF
response.end
end if
if request("password")="" then
response.write "<script language='javascript'>" & VbCRlf
response.write "alert('密码不能为空!');" & VbCrlf
response.write "history.go(-1);" & vbCrlf
response.write "</script>" & VbCRLF
response.end
end if
if request("GetCode")="" then
response.write "<script language='javascript'>" & VbCRlf
response.write "alert('验证码不能为空!');" & VbCrlf
response.write "history.go(-1);" & vbCrlf
response.write "</script>" & VbCRLF
response.end
end if



username=HTMLEncode(request("username"))
password=MD5(HTMLEncode(request.Form("PassWord")),16)
GetCode=HTMLEncode(Request.Form("GetCode"))
IF Cstr(GetCode)<>Cstr(Session("GetCode")) Then
    Call MsgBox("客服MM提醒您：验证码不正确","Back","")
    Response.End()
End IF

sql="select * from dd_user where user_name='"&username&"' and user_password='"&password&"' "
set rs= Server.CreateObject("ADODB.Recordset") 
rs.open sql,conn,1,1
if rs.eof then
response.write "<script language='javascript'>" & VbCRlf
response.write "alert('用户名或密码或验证码不正确!');" & VbCrlf
response.write "history.go(-1);" & vbCrlf
response.write "</script>" & VbCRLF
response.end
else
session("user_id")=rs("user_id")
session("user_name")=rs("user_name")
session("user_password")=rs("user_password")
response.redirect "index.asp"
end if
rs.close
set rs=nothing
conn.close
set conn=nothing
%>