login_save.asp

shopxp网上购物系统v6.6已经调试,百分百可用

<!--#include file="../nUser/config.asp" -->
<!--#include file="../nUser/conn.asp" -->
<!--#include file="../nUser/md5.asp" -->
<%
Dim RsLoginObj,RsLogObj
Dim UserName,UserPass,VerifyCode,System,SqlLog,SqlLogin,Url
Url = "index.htm"	
UserName = Replace(Trim(Request.Form("Name")),"'","''")
UserPass = Left(md5(replace(trim(Request("password")),"'","")),16)
VerifyCode = Replace(Trim(Request("VerifyCode")),"'","")

if UserName = "" or  UserPass = "" then
	Response.Write("<script>alert(""错误：\n请填写完整"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End
end if

if  VerifyCode <> CStr(Session("GetCode"))  then 
	Response.Write("<script>alert(""错误：\n验证码错误"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End
end if
if request("VerifyCode") = "" then
	Response.Write("<script>alert(""错误：\n请填写验证码"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End
elseif Session("GetCode") = "9999" then
	Session("GetCode")=""
elseif Session("GetCode") = "" then
	Response.Write("<script>alert(""错误：\n请不要重复提交，如需重新登录请返回登录页面。\n返回后请刷新登录页面后重新输入正确的信息"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End
elseif cstr(Session("GetCode"))<>cstr(Trim(Request("VerifyCode"))) then
	Response.Write("<script>alert(""错误：\n您输入的确认码和系统产生的不一致，请重新输入。\n返回后请刷新登录页面后重新输入正确的信息"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End
end if
Session("GetCode")=""
System = Request.ServerVariables("HTTP_USER_AGENT")
if Instr(System,"Windows NT 5.2") then
	System = "Win2003"
elseif Instr(System,"Windows NT 5.0") then
	System="Win2000"
elseif Instr(System,"Windows NT 5.1") then
	System = "WinXP"
elseif Instr(System,"Windows NT") then
	System = "WinNT"
elseif Instr(System,"Windows 9") then
	System = "Win9x"
elseif Instr(System,"unix") or instr(System,"linux") or instr(System,"SunOS") or instr(System,"BSD") then
	System = "类Unix"
elseif Instr(System,"Mac") then
	System = "Mac"
else
	System = "Other"
end if

Set RsLoginObj = server.CreateObject ("ADODB.RecordSet")
SqlLogin = "select * from kheu_nUser where user_email='"&UserName&"' and  user_password='"&UserPass&"'"
RsLoginObj.Open SqlLogin,Conn,1,1
if Not RsLoginObj.EOF then   
    if RsLoginObj("user_power")>10000 then
	Session("user_email") = RsLoginObj("user_email")
	Session("user_id") = RsLoginObj("user_id")
	conn.execute("update kheu_nUser set user_enter_count=user_enter_count+1 where user_email='"&UserName&"'")
	conn.execute("update kheu_nUser set user_last_time='"&now()&"' where user_email='"&UserName&"'")
	Set RsLogObj = Server.Createobject("adodb.recordset")
   	Response.Redirect "main.asp" 
	Response.End
	else
	Response.Write("<script>alert(""错误:\只有能力积分大于10000分方可参与后台管理\n"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End	
	end if	
else
	Response.Write("<script>alert(""错误:\n请检查用户名和密码的正确性\n"&Copyright&""");location.href=""Login.asp"";</script>")
	Response.End
end if

RsLoginObj.close
Set RsLoginObj = Nothing
call connclose()
%>