checkuser.asp

东北农业大学教学管理系统

<%
if Session("Username") = "" or Session("Username") = null then
	Response.Write("<script>alert('对不起，您尚未登陆或登陆超时，请重新登陆！');top.location.href='Index.htm';</script>")
	Response.End()
end if

Const TableBackColor = "#000000"		'表格背景颜色
Const TableTitleColor = "#99A6BF"		'表格主单元格颜色
Const TableLeftColor = "#E7EAEF"		'表格左单元格言色
Const TableBodyColor = "#FFFFFF"		'表格单元格主颜色
Const BackGroundImg = "Images/bg.jpg"	'背景图片

if Session("Admin") = "" or Session("Admin") = null then

end if

'对用户是否跨用户登陆进行验证
dim rs1
Set rs1 = conn.execute( "Select loginSessionID From [userinfo] Where id = " & Session("UID"))
if rs1.BOF or rs1.EOF then
else
	if Session.SessionID <> rs1(0) then
		Response.Write("<script>alert('对不起，您的用户已经被盗用，或者被从其他的窗口登陆，请重新登陆！');window.top.location.href='Logout.asp';</script>")
		Response.End()
	end if
end if
rs1.close()


if Session("refuseIP") <> "" then
'对IP进行过滤
dim Refuse
Refuse = Split(Session("refuseIP"),"|")

dim r
for r = 0 to ubound(Refuse)
	if Request.ServerVariables("REMOTE_ADDR") = Refuse(r) then
		Response.Write("<script>alert('对不起，您的IP禁止访问本系统，有任何疑问请联系管理员！');window.top.location.href='Logout.asp';</script>")
		Response.End()
	end if
next
end if

if Session("refuseIPsect") <> "" then
'对IP段进行过滤
dim RefuseSect
RefuseSect = Split(Session("refuseIPsect"),"|")

for r = 0 to Ubound(RefuseSect)
	if getIPsect(Request.ServerVariables("REMOTE_ADDR")) <> RefuseSect(r) then
		Response.Write("<script>alert('对不起，您的IP所在的IP段禁止访问本系统，有任何疑问请联系管理员！');window.top.location.href='Logout.asp';</script>")
		Response.End()
	end if
next
end if
	
	
Function getIPsect(ip)

	dim cip
	cip = Split(ip,".")

	getIpsect = cip(0)&"."&cip(1)&"."&cip(2)&".*"

End Function
%>