<!--#include file="inc/DB.INC" -->
<%
Function Sqlstr(data)
 	sqlstr=Replace(data,"'","''")
End Function
userid=sqlstr(request.cookies("myuserid"))
password=sqlstr(request.cookies("mypwd"))
if userid<>"" then
response.cookies("flag")="yes"
response.cookies("flag").Expires=Date+365
response.redirect "index.asp"
else 
response.cookies("flag")="no"
response.cookies("flag").Expires=Date+365
end if
'如果已存在cookies
if request.cookies("flag")="yes" then
	'直接進(jìn)入主頁(yè)時(shí)
	if request.cookies("myuserid")<>"" and request.cookies("mypwd")<>"" then
	userid=request.cookies("myuserid")
	password=request.cookies("mypwd")
	session("myuserid")=userid
	session("mypwd")=password
	else
	userid=""
	session("myuserid")=""
	end if
'如果未存在cookies
else
	'非直接進(jìn)入主頁(yè)時(shí)
	userid=request.form("userid")
	password=request.form("password")
	autoin=request.form("autoin")
	'要求創(chuàng)建cookies
	if autoin="ok" then
		'正常用戶登錄時(shí)
		if userid<>"" then
		response.cookies("myuserid")=userid
		response.cookies("mypwd")=password
		response.cookies("myuserid").expires=date+365
		response.cookies("mypwd").expires=date+365
		session("myuserid")=userid
		session("mypwd")=password
		'客人登錄時(shí)
		else
		session("myuserid")=""
		end if 
	'不要求創(chuàng)建時(shí)
	else
		if userid<>"" then
		session("myuserid")=userid
		session("mypwd")=password
		response.cookies("myuserid").expires=date
		response.cookies("mypwd").expires=date
		else
		session("myuserid")=""
		response.cookies("myuserid").expires=date
		response.cookies("mypwd").expires=date
		end if
	end if

end if
sql= "select userid,password from txluser where userid='"&userid&"' and password='"&password&"'"
set rs=conn.execute(sql)
if  rs.eof or  rs.bof then
%>
<script language="javascript">
alert("可能是你的同學(xué)ID或密碼輸入有誤！！")
parent.location.href="index.asp"
</script>
<%else
mysql="select truename,logcnt,logtime from [txluser] where userid='"&userid&"'"
set rs=Server.CreateObject ("ADODB.RECORDSET")
rs.open mysql,conn,1,3
rs("logcnt")=rs("logcnt")+1
rs("logtime")=now
truename=rs("truename")
rs.update
set rs=nothing
set conn=nothing
session("myuserid")=userid
session("mypwd")=request.form("password")
Application("onuser")=truename
response.redirect "index.asp"
end if
%>