<!--#include file="my_conn.asp"-->
<%
  if request("username")="" or request("password")="" then
  	Response.Write "<script Language=Javascript>alert('請正確填寫用戶名和密碼！');location.href = 'javascript:history.go(-1)';</script>"
	Response.End
  else
  uname=request("username")
  upass=request("password")
  end if

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''  
  if ErrMsg="" then'連接數據庫成功
  set rs=server.CreateObject ("adodb.recordset")
      query="select * from Reg_User where UName='"&UName&"'"
      rs.Open query,conn,1,1
    if rs.RecordCount <=0 then
      	Response.Write "<script Language=Javascript>alert('你還不是會員，請注冊！');location.href = 'javascript:history.go(-1)';</script>"
		Response.End
	else
          session("UName")=UName
		  session("UPass")=rs("UPass")   
		  session("UClass")=rs("UClass")
		  session("Scenes")=rs("Scenes")
		  session("EndTime")=rs("EndTime")

      if session("UPass")<>UPass then
        Response.Write "<script Language=Javascript>alert('你輸入的密碼不正確！');location.href = 'javascript:history.go(-1)';</script>"
      elseif session("endtime")<now() then
        Response.Write "<script Language=Javascript>alert('你的帳戶已過期！');location.href = 'javascript:history.go(-1)';</script>"
      elseif session("scenes")<=0 then
        Response.Write "<script Language=Javascript>alert('你的點值已用完！');location.href = 'javascript:history.go(-1)';</script>"
		elseif session("uclass")<>"內幕會員" then
        Response.Write "<script Language=Javascript>alert('你不是內幕會員！');location.href = 'javascript:history.go(-1)';</script>"
      end if      

	  '通過驗證,正式登錄
	  if session("Uclass")="內幕會員" and  session("UPass")=UPass and session("endtime")>now() and session("scenes")>0 then
      dim sql
      set rs2=server.CreateObject ("adodb.recordset")
      sql="update Reg_User set scenes=scenes-1 where UName='"&UName&"'"
      rs2.open sql,conn,1,1
      set rs2=nothing	
      response.redirect "mmlist.asp"
      end if   


    end if
  rs.Close
  set rs=nothing
  end if

%>