denglu2.asp

教务系统工程 学生管理工作 教师管理工作

<% 
set conn = Server.CreateObject("ADODB.Connection")
	conn.Open("Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&server.mappath("lyb.mdb")) 
Dim UserName,PassWord 
UserName=Request.Form("username") 
PassWord=Request.Form("password") 
If UserName="" or PassWord="" Then 
Response.Write ("<script>alert('登陆失败!\n\n错误原因:教工号和密码未填。');history.back();</script>") 
Response.end 
End If 

if Instr(UserName,">")>0 or Instr(UserName,"<")>0 or Instr(UserName,"=")>0 or Instr(UserName,"%")>0 or Instr(UserName,chr(32))>0 or Instr(UserName,"?")>0 or Instr(UserName,"&")>0 or Instr(UserName,";")>0 or Instr(UserName,",")>0 or Instr(UserName,"'")>0 or Instr(UserName,chr(34))>0 or Instr(UserName,chr(9))>0 or Instr(UserName,"