<!--#include file="conn.asp"-->
<%'---------程序編寫說明-------%> 
<%'本程序由junping96編寫
'程序名稱：新世紀影院VOD播放系統（商業版）
'FileName: Userpass.asp
'EditDate:2003-12-07
'Editer:junping96
'Email:junping96@163.com
'QQ:       249112913 249114058
'請尊重本人勞動，禁止修改版權，有任何問題請和我聯系。
%>
<%
dim username,password
username=trim(request.form("username"))
username=replace(username,"'","")
if username="" then
response.write"<script>alert('請輸入用戶名');history.back(-1);</script>"
response.end
end if
password=trim(request.form("password"))
password=replace(password,"'","")
if password="" then
response.write"<script>alert('請輸入密碼');history.back(-1);</script>"
response.end
end if
'if request.cookies("logined")="yes" then
'response.redirect request.servervariables("HTTP_REFERER")
'end if
set rs=server.createobject("adodb.recordset")
sql="select * from user where username='"&username&"' and password='"&password&"'"
rs.open sql,conn,1,3
if rs.eof or bof then
response.write"<script>alert('錯誤，你的身份未能通過驗證。');history.back(-1);</script>"
response.end
else
if rs("todaydate")<>date() then
rs("todaydate")=date()
rs("todaycs")=0
end if
if rs("todaycs")>8 then
response.write"<script>alert('錯誤，你今天登陸的次數太多了，我站禁止頻繁登陸!');window.close();</script>"
response.end
end if
rs("lasttime")=rs("logintime")
rs("logintime")=now()
rs("allcs")=rs("allcs")+1
rs("todaycs")=rs("todaycs")+1
rs.update
oklogin=now()+1/96
response.write oklogin
response.cookies("username")=rs("username")
response.cookies("password")=rs("password")
response.cookies("logined")="yes"
response.cookies("username").expires=oklogin
response.cookies("password").expires=oklogin
response.cookies("logined").expires=oklogin
set cmd=server.createobject("adodb.connection")
cmd.open conn
ip=request.servervariables("REMOTE_ADDR")
userdj=rs("userdj")
sqlcmd="insert into userlog(username,ip,userdj) values('"&username&"','"&ip&"','"&userdj&"')"
cmd.execute(sqlcmd)
cmd.close
set cmd=nothing
'response.write request.cookies("logined")
'response.write request.cookies("username")
'response.write request.cookies("password")
response.redirect request.servervariables("HTTP_REFERER")
end if
rs.close
set rs=nothing
%>