verify.asp

ASP原码

<%@ Language=VBScript %>
<!--#include file="const.asp"-->
<!--#include file="misc.asp"-->

<%
	set vf=server.CreateObject("DIAVDir.VDirFile")

	set cn=server.CreateObject("ADODB.connection")
    cn.Open DSN_ACLASS
    
	set rs=server.CreateObject("ADODB.recordset")
	username=Replace(Trim(request("username")),"'","''")
	password=Replace(Trim(request("password")),"'","''")
	sql="select * from "&TBL_USER&" where USERNAME='"&username&"'"
	rs.Open sql,cn

	if not rs.EOF then
		if (isnull(rs("password")) and password="") or (rs("password")="" and password="") or trim(rs("password"))=password then
			
			session("userid")=rs("id")                      
			session("username")=rs("username")
			session("Userpassword")=rs("password")                      
			session("UserType")=rs("type")                      
			session("usertypename")=NameFromID(cn, "DIC_USERTYPE","ID","NAME", rs("TYPE"))
			session("PageSize") = 10

			' HOME_DIR
			fullurl=request.ServerVariables("HTTP_REFERER")
			pos=InStr(1,fullurl, "/default.asp",1)
			if pos <> 0 then
				session("HOME_DIR")=mid(fullurl,1,pos)
			else
				session("HOME_DIR")=fullurl
			end if

			rs.close
			set rs=nothing
			cn.close
			set cn=nothing
			
			select case session("UserType")
				case UTP_ADMIN: 
					response.Redirect("../Admin/User/list.asp?sql=All")
				case UTP_ASADMIN: 
					response.Redirect("../ASAdmin/User/list.asp?sql=All")
				case UTP_SCHOOLADMIN: 
					response.Redirect("../SchoolAdmin/default.asp")
				case UTP_CLASSADMIN: 
					response.Redirect("../Teacher/Course/default.asp")
				case UTP_TEACHER: 
					response.Redirect("../Teacher/Course/default.asp")
				case UTP_STUDENT: 
					response.Redirect("../Student/Course/default.asp")
				case else:
					Response.Write "<p align=center>总经理或者专家身份不能从网页登录！</p>"
					Response.Write "<p align=right><a href='vbscript:history.back'>返回</a></p>"
			end select
		else
			Response.Write "<p align=center>密码错误，请重新输入。</p>"
			Response.Write "<p align=right><a href='vbscript:history.back'>返回</a></p>"
		end if
	else
		Response.Write "<p align=center>该用户不存在，请重新输入。</p>"
		Response.Write "<p align=right><a href='vbscript:history.back'>返回</a></p>"
	end if
%>