<%Response.Buffer=true%>
<!--#include file="conn.asp"-->
<!--#include file="const.asp"-->
<!--#include file="function.asp"-->
<!--#include file="style.asp"-->
<%if instr(lcase(request("comeurl")),"useradd.asp")>0 or instr(lcase(request("comeurl")),"userlogin.asp")>0 or instr(lcase(request("comeurl")),"usersave.asp")>0 or instr(lcase(request("comeurl")),"userchklogin.asp")>0 or trim(request("comeurl"))="" then
	url="index.asp"
else
	url=request("comeurl")
end if
Response.Write "<meta HTTP-EQUIV=REFRESH CONTENT='1; URL="&url&"'>"
founderr=false
UserIP=Request.ServerVariables("REMOTE_ADDR")
if trim(request("username"))="" then
	errmsg=errmsg+"<br>"+"<li>請輸入您的用戶名。"
	founderr=true
else
	username=trim(request("username"))
end if
if request("password")="" then
	errmsg=errmsg+"<br>"+"<li>請輸入您的密碼。"
	founderr=true
else
	password=trim(request("password"))
end if
if founderr=true then
call error()
response.end
end if
set rs=server.createobject("adodb.recordset")
sql="select * from user where username='"&username&"' and lockuser=0"
rs.open sql,conn,1,3
if rs.bof and rs.eof then
	errmsg=errmsg+"<br>"+"<li>您輸入的用戶名并不存在，<a href='UserReg.asp'>請先注冊</a><li>或者管理員已經將用戶賬號鎖定，請和管理員聯系。"
	call error()
	response.end
else
	if rs("password")<>password then
		errmsg=errmsg+"<br>"+"<li>您輸入的密碼不正確。"
		call error()
		response.end
	else
	     if Request.Cookies("bookbaby")("username")<>username then
		rs("login")=rs("login")+1
		rs("score")=rs("score")+1
		lastlogin=rs("lastlogin")
		usersex=rs("sex")
		rs("lastlogin")=now
		rs("loginIP")=Request.ServerVariables("REMOTE_ADDR")
		rs.update
		conn.execute "delete * from online where username='"&Request.Cookies("bookbaby")("username")&"'"
		conn.execute "delete * from online where username='"&username&"'"
		conn.execute "insert into online(username,sex,stat,lasttime) values ('"&username&"',"&usersex&",'登陸論壇','"&now()&"')"
	     else
		lastlogin=rs("lastlogin")
		conn.execute("update online set stat='登陸論壇',lasttime='"&now()&"' where username='"&Request.Cookies("bookbaby")("username")&"'")
	     end if
%>
<table bgcolor=#000000 border=0 cellpadding=3 cellspacing=1 width="500" valign="top" align="center">
  <tr align="center">
    <td bgcolor="<%=tablebodycolor%>" colspan=4><%=rs("username")%>:您的登陸已經確認!</td>
  </tr>
  <tr align="center"> 
    <td bgcolor="<%=tablebodycolor%>" colspan="4">1秒后自動返回,如果您的瀏覽器沒有反應,請<a href="<%=comeurl%>"><font color=#000000>點擊這里返回</font></a></td>
  </tr>
</table>
<%
		Response.Cookies("bookbaby")("username")=username
		Response.Cookies("bookbaby")("userpwd")=password
		Response.Cookies("bookbaby")("usersex")=usersex
		
		select case Request.Form("cookietype")
		    case "0" Response.cookies("bookbaby").expires=dateadd("d",3,now())
			case "1" Response.Cookies("bookbaby").expires=dateadd("ww",1,now())
			case "2" Response.Cookies("bookbaby").expires=dateadd("m",1,now())
			case "3" Response.Cookies("bookbaby").expires=dateadd("yyyy",1,now())
			case "4" Response.Cookies("bookbaby").expires=dateadd("yyyy",10,now())
		end select
	end if
end if
rs.close
set rs=nothing
conn.close
set conn=nothing
if datediff("d",lastlogin,now)>7 then 
	response.write "<script>javascript:alert('帥哥（或美女）:"&username&"\n\n您已經超過一個星期沒有來登陸了,現在您終于來了，我們好高興喲，希望您經常來我們的論壇喲^_^!')</script>"
end if
%>