checkin.asp

客户管理系统使用ASP.NET和Access

<!-- #include file="conn.asp" -->
<%
function ChkPost()
	dim server_v1,server_v2
	chkpost=false
	server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
	server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
	if mid(server_v1,8,len(server_v2))<>server_v2 then
		chkpost=false
	else
		chkpost=true
	end if
end function
%>
<%	if chkpost=false then
   		response.Write("请不要从站处提交。")
	conn.Execute "INSERT INTO log(username,action,ip,sj) VALUES('站外提交','从站外提交','"&Request.ServerVariables("Remote_Addr") &"','"&now()&"' )"	
else
%>

<%
 name=request.form("name")
 pass=request.form("pass")
if instr(pass,"'")>0 or instr(name,"'")>0 then
  conn.Execute "INSERT INTO log(username,action,ip,sj) VALUES('Guest_login','有危险字符"&trim(request.QueryString("name"))&"-"&trim(request.QueryString("pass"))&"','"&Request.ServerVariables("Remote_Addr") &"','"&now()&"' )"	
  response.redirect "/error/error.asp?T=1"
  else
  set rs=server.createobject("adodb.recordset")
  sql="select * from Member where name='"&name&"' and pass='"&pass&"'"
  rs.open sql,conn,3,3
  if not rs.eof and not rs.bof then
  session("Memberid")=rs("id")
  session("Member")=rs("name")
  session("dep")=rs("dep")
  session("zw")=rs("zw")
  Response.Cookies("Member")=rs("name")
  Response.Cookies("Member").Expires=Date + 30 

  rs("lastip")=Request.serverVariables("REMOTE_ADDR")
  rs("lasttime")=now
  rs("n")=rs("n")+1
  rs.update
  %>
<br><br><br><br><br><br><br>
 <div align="center">您好：<%=session("Member")%>，登录成功！<a href="./"  onClick="window.open(this.href,'科星客户管理','left=100,top=200,width=800,height=380,location=no,directories=no,toolbar=yes,menubar=no,scrollbars=yes,resizable=yes');return false;">点击这里</a>！
<script language="javascript">
<!--
function clock(){i=i-1
document.title="您好：<%=session("Member")%>，登录成功！本窗口将在"+i+"秒后自动关闭!";
if(i>0)setTimeout("clock();",1000);
else self.close();}
var i=10
clock();
//-->
</script>
    <%
	'response.end
    'response.redirect "./"
  else
  response.redirect "../error/error.asp?T=1"
  end if
  rs.close
  set rs=nothing
  conn.close
  set conn=nothing
  end if
%>
    <%end if%>
</div>