<!--#include file="conn.asp"-->
<!--#include file="md5.asp"-->
<%dim username,userpassword,comeurl,verifycode
username=replace(trim(request("username")),"'","")
userpassword=md5(replace(trim(request("userpassword")),"'",""))
verifycode=replace(trim(request("verifycode")),"'","")
if username="" or userpassword="" then
response.write "<script LANGUAGE='javascript'>alert('您的用戶名或密碼有誤！');history.go(-1);</script>"
response.end
end if
if cstr(session("getcode"))<>cstr(trim(request("verifycode"))) then
response.Write "<script LANGUAGE='javascript'>alert('請輸入正確的驗證碼！');history.go(-1);</script>"
response.end
end if

set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from [user] where username='"&username&"' and userpassword='"&userpassword&"' " ,conn,1,3
if not(rs.bof and rs.eof) then
if userpassword=rs("userpassword") then
response.Cookies("godbook")("username")=trim(request("username"))
response.Cookies("godbook")("reglx")=rs("reglx")
response.Cookies("godbook")("jifen")=rs("jifen")
response.Cookies("godbook")("jiaoyijine")=rs("jiaoyijine")

	Response.Cookies("aspsky")("username") = rs("username")
	Response.Cookies("aspsky")("password") = rs("userpassword")
	Response.Cookies("aspsky")("userclass") = rs("userclass")
	Response.Cookies("aspsky")("userid") =rs("userid")
	Response.Cookies("aspsky")("userhidden") = 2
	Response.Cookies("aspsky").path="/shop/shop/bbs/"
 	Response.Cookies("aspsky")("usercookies") = 1
	Response.Cookies("aspsky").Expires=Date+1
	
rs("lastlogin")=now()
rs("logins")=rs("logins")+1
rs("userlastip")=Request.ServerVariables("REMOTE_ADDR")
rs.Update
rs.Close
set rs=nothing
username=trim(request("username"))
conn.execute("delete from shop_action where username='"&username&"' and zhuangtai=7")
conn.execute("delete from shop_action_jp where username='"&username&"' and zhuangtai=7")
if request("linkaddress")="" then
response.redirect request.servervariables("http_referer")
else
response.redirect request("linkaddress")
end if
else
response.write "<script LANGUAGE='javascript'>alert('對不起，您的用戶名或密碼有誤！');history.go(-1);</script>"
end if
else
response.write "<script LANGUAGE='javascript'>alert('對不起！您的用戶名或密碼有誤！');history.go(-1);</script>"
end if
'sub loginok()
'response.Write "歡迎您 <font color=red>"&request.Cookies("bookshop")("username")&"</font>"
'response.redirect "index.asp"
'end sub
%>