login.asp

一个ＡＳＰ网站博克程序

<% Option Explicit %>
<!-- #Include File = "common/LarrixDBMS.asp" -->
<!-- #Include File = "common/LarrixCODE.asp" -->

<%
	Session("Passport") = 0
	Session("UseLevel") = False
	Dim objDBMS
	Dim strURL
	Set objDBMS = New LarrixDBMS
	objDBMS.Open "SELECT [MemberID],[MemberPW],[MemberNUM] FROM [Members] WHERE [MemberUID]='" & Trim(Request.Form("username")) & "' AND [MemberPWD]='" & MD5(Trim(Request.Form("password"))) & "'", 3
	If objDBMS.objRSET.EOF And objDBMS.objRSET.EOF Then
		Session.Abandon()
		strURL = Request.ServerVariables("HTTP_REFERER")
	Else
		Session("Passport") = objDBMS.objRSET("MemberID")
		Session("UsrLevel") = objDBMS.objRSET("MemberPW")
		objDBMS.objRSET("MemberNUM").Value = objDBMS.objRSET("MemberNUM") + 1
		objDBMS.objRSET.Update
		strURL = "manage/Default.asp"
	End If
	objDBMS.Close
	Set objDBMS = Nothing
	Response.Redirect(strURL)
%>