check.asp

东北农业大学教学管理系统

<!--#include file="Conn.asp"-->
<!--#include file="Inc/md5.asp"-->
<%
'=====初始化系统变量=======
Set rs = Server.CreateObject("ADODB.RecordSet")
sql = "Select * From [config] Where nowused = 1"
rs.Open sql,conn,1,1
if rs.bof or rs.eof then
	Response.Write("<script>alert('对不起，系统发生未知错误，请重新登陆！');window.history.back();</script>")
	Response.End()
else
	Session("refuseIP") = rs("refuseIP")
	Session("refuseIPsect") = rs("refuseIPsect")
	Session("isOpen") = rs("isOpen")
	Session("isSearch") = rs("isSearch")
end if
rs.close()
'==========================
%>
<%
dim userid,userpass,userpower
userid = Trim(Request.Form("userid"))
userpass = Trim(Request.Form("userpass"))
userpower = Trim(Request.Form("userpower"))
if userid = "" then
	Response.Write("<script>alert('对不起，请输入用户名！');window.history.back();</script>")
	Response.End()
elseif userpass = "" then
	Response.Write("<script>alert('对不起，您输入密码！');window.history.back();</script>")
	Response.End()
end if

Set rs = Server.CreateObject("ADODB.RecordSet")
sql = "Select * From [userinfo] Where userid = '"&userid&"'"
rs.Open sql,conn,1,1
if rs.BOF or rs.EOF then
	Response.Write("<script>alert('对不起，您输入的用户名不存在！');window.history.back();</script>")
	Response.End()
elseif userpass <> rs("userpass") then
'elseif md5(userpass) <> rs("userpass") then
	Response.Write("<script>alert('对不起，您输入的密码不正确！');window.history.back();</script>")
	Response.End()
elseif userpower <> rs("userpower") then
	Response.Write("<script>alert('对不起，您登陆的身份不对，请选择正确的身份登陆！');window.history.back();</script>")
	Response.End()
else
	Session("UID") = rs("id")
	Session("Username") = rs("userid")
	Session("Userpower") = rs("userpower")
	if rs("userpower") = 10 then
		Session("Admin") = true
	end if
end if
rs.Close()
set rs = Nothing
'写入登陆信息
conn.Execute("Update [userinfo] Set loginTimes = loginTimes + 1, loginSessionID = '"&Session.SessionID&"' Where id = " & Session("UID"))

if Session("Username") <> "" then
	Response.Redirect "Main.htm"
end if

CloseDatabase
%>