checkusr.asp

一个在线考试系统

<!--#include file="conn.inc"-->
<%
userid=request("userid")
pwd=request("pwd")
kind=request("kind")
sql="select * from cadre_info where userid="&userid&" and pwd='"&pwd&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,3,2
if rs.eof then
  response.redirect "loginleftframe.asp?temp=error"
else
  userid=rs("userid")
  username=rs("username")
  department=rs("department")
  office=rs("office")
  duties=rs("duties")
  post=rs("post")
  rank=rs("rank")
  spower=rs("spower")
  rs.close  
end if
if kind="A"  then
  tempstr=instr(spower,"A")
    if tempstr<>0 then
    Response.Cookies("logok")="yes"
    Response.Cookies("userid")=userid
    Response.Cookies("username")=username
    Response.Cookies("pwd")=pwd
    Response.Cookies("department")=department
    Response.Cookies("office")=office
    Response.Cookies("duties")=duties
    Response.Cookies("POST")=post
    Response.Cookies("rank")=rank  
    Response.Cookies("spower")=spower
    response.redirect "admindefault.asp"
    else
    response.redirect "loginleftframe.asp?temp=nota"
    end if   
else
    Response.Cookies("logok")="yes"
    Response.Cookies("userid")=userid
    Response.Cookies("username")=username
    Response.Cookies("pwd")=pwd
    Response.Cookies("department")=department
    Response.Cookies("office")=office
    Response.Cookies("duties")=duties
    Response.Cookies("POST")=post
    Response.Cookies("rank")=rank  
    response.redirect "default.asp"
end if
%>