<!--#include file="conn.asp" -->


<%
user=request("username")
password=request("password")

'===============獲取用戶ip====================

	Dim userip,userip2
	userip = Request.ServerVariables("HTTP_X_FORWARDED_FOR")
	userip2 = Request.ServerVariables("REMOTE_ADDR")
	if userip = ""  then
    userip=userip2
	end if

session("userip")=userip

'==========================================

session("user")=user

sql="select * from user where userid='"&user&"' "
set rs=server.CreateObject("adodb.recordset")
rs.open sql,conn,3,2


if rs.eof then

%>
<font size=4 >用戶名或密碼錯誤,請確認后再登陸!!</font><br>
<a href="javascript:history.go(-1)">返回</a></p>
 

 <%
 response.end
 
 end if
 
if trim(rs("password"))=password then

  '登陸成功,修改用戶信息
  rs("online")=true
  rs("logins")= rs("logins")+1
  rs.update
  
  response.redirect("main.asp")
 
else
%>
<font size=4 >用戶名或密碼錯誤,請確認后再登陸!!</font><br>
<a href="javascript:history.go(-1)">返回</a></p>
 
 
 <%
 response.end
end if



%>