login2.asp

来自「希望这个班级源码能够帮那些需要帮助的朋友」· ASP 代码 · 共 86 行

<!--#include file="inc/DB.INC" -->
<%
Function Sqlstr(data)
 	sqlstr=Replace(data,"'","''")
End Function
userid=sqlstr(request.cookies("myuserid"))
password=sqlstr(request.cookies("mypwd"))
if userid<>"" then
response.cookies("flag")="yes"
response.cookies("flag").Expires=Date+365
response.redirect "index.asp"
else 
response.cookies("flag")="no"
response.cookies("flag").Expires=Date+365
end if
'如果已存在cookies
if request.cookies("flag")="yes" then
	'直接进入主页时
	if request.cookies("myuserid")<>"" and request.cookies("mypwd")<>"" then
	userid=request.cookies("myuserid")
	password=request.cookies("mypwd")
	session("myuserid")=userid
	session("mypwd")=password
	else
	userid=""
	session("myuserid")=""
	end if
'如果未存在cookies
else
	'非直接进入主页时
	userid=request.form("userid")
	password=request.form("password")
	autoin=request.form("autoin")
	'要求创建cookies
	if autoin="ok" then
		'正常用户登录时
		if userid<>"" then
		response.cookies("myuserid")=userid
		response.cookies("mypwd")=password
		response.cookies("myuserid").expires=date+365
		response.cookies("mypwd").expires=date+365
		session("myuserid")=userid
		session("mypwd")=password
		'客人登录时
		else
		session("myuserid")=""
		end if 
	'不要求创建时
	else
		if userid<>"" then
		session("myuserid")=userid
		session("mypwd")=password
		response.cookies("myuserid").expires=date
		response.cookies("mypwd").expires=date
		else
		session("myuserid")=""
		response.cookies("myuserid").expires=date
		response.cookies("mypwd").expires=date
		end if
	end if

end if
sql= "select userid,password from txluser where userid='"&userid&"' and password='"&password&"'"
set rs=conn.execute(sql)
if  rs.eof or  rs.bof then
%>
<script language="javascript">
alert("可能是你的同学ID或密码输入有误！！")
parent.location.href="index.asp"
</script>
<%else
mysql="select truename,logcnt,logtime from [txluser] where userid='"&userid&"'"
set rs=Server.CreateObject ("ADODB.RECORDSET")
rs.open mysql,conn,1,3
rs("logcnt")=rs("logcnt")+1
rs("logtime")=now
truename=rs("truename")
rs.update
set rs=nothing
set conn=nothing
session("myuserid")=userid
session("mypwd")=request.form("password")
Application("onuser")=truename
response.redirect "index.asp"
end if
%>