<%@ LANGUAGE = vbscript %>
<!--#INCLUDE FILE = "include/shop.asp" -->
<!--#INCLUDE FILE = "include/util.asp" -->
<% REM ##########################################################################%>
<% REM                                                                          #%>
<% REM   XT_MEMBER_LOGIN.ASP                                                    #%>
<% REM   用戶登錄                                                               #%>
<% REM                                                                          #%>
<% REM   Copyright (c) 1999-2000 Epro Corporation.  All rights reserved.        #%>
<% REM                                                                          #%>
<% REM ##########################################################################%>

<%
    dim errorList
    
    shortname    = checklength(Request("name"), 20)
	if IsNull(shortname) then
		errorList=errorList & "用戶名為1到20個字符。<br>"
	end if 
    password      = checklength(Request("pa"), 20)
	if IsNull(password) then
		errorList=errorList & "密碼為1到20個字符。<br>"
	end if 
    on error goto 0
    
    if errorList= "" then
		cmdTemp.CommandText = "SELECT shortname FROM Shopper WHERE shortname = '" & Replace(shortname, "'", "''") & "' and password='" & Replace(password, "'", "''") & "'"

		Set recordSet = Server.CreateObject("ADODB.Recordset")
		recordSet.Open cmdTemp, , adOpenKeyset, adLockOptimistic
		
		if recordSet.RecordCount =0 then
		    errorList=errorList & "用戶名或密碼錯誤。<br>"
		else
		    Session("ShopperId") = recordSet("shortname").value
        end if
    end if

    if errorList<> "" then
%>
        <!--#INCLUDE FILE="include/error.asp" -->
<%
    else
        if isnull(Request("goto")) or Request("goto")="" then
            Response.Redirect "index.asp"
        else
			Response.Redirect Request("goto")
		end if
    end if
%>