admin_chklogin.asp

庐江二中

<!--#include file="conn.asp"-->
<!--#include file="session.asp"-->
<%
username=checkin(trim(Request.form("username")))
password=checkin(trim(Request.form("password")))
if username="" or password="" then Response.Redirect ("admin_login.asp")

sql="select * from admin where username='"&username&"'and password='"&password&"'"
rs.open sql,conn,1,3
if not rs.EOF then
rs("LoginTimes")=rs("LoginTimes")+1
rs("LoginTime")=now()
rs("LoginIP")=Request.ServerVariables("REMOTE_ADDR")
rs.Update
Session("IsAdmin")=null
Session("AdminID")=rs("id")
Session("username")=rs("username")	
Session("IsAdmin")=true
Session("KEY")=rs("oskey")
Session("LoginIP")=rs("LoginIP")
Session("password")=rs("password")
	rs.close
	set rs=nothing
	conn.close
	set conn=nothing
Response.Redirect ("ljez.asp")
else
	rs.close
	set rs=nothing
	conn.close
	set conn=nothing
errmsg="<li>请输入正确的管理员名字和密码！</li>"
call error()
Response.End
end if
%>