<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="conn.asp" -->
<!--#include file="qyschar.asp" -->
<%
dim loginname ,loginpwd,access

loginname=replace(trim(request("loginname")),"'","")
loginpwd=trim(Request.Form("loginpwd"))
access=request("access")
if loginname="" or loginpwd="" then
 	response.write "<script language=JavaScript>{window.alert('對不起，帳號和密碼不能為空!');window.history.go(-1);}</script>"
    response.end
end if

loginpwd=oyfqm(loginpwd)
set rs=server.createobject("adodb.recordset")
if access="sys" then
url="admin_index.asp"
sql="select * from admin where adminlogin='" & loginname & "' and adminpwd='" & loginpwd & "'"
else if access="teacher" then
url="teacher_index.asp"
sql="select * from jg where login='" & loginname & "' and pwd='" & loginpwd & "'"
end if
end if
rs.open sql,conn,1,2

	    '向jg表中添加教工最后登錄日期
if not rs.eof then
 loginshu=rs("logintimes")
 if loginshu="" then
 loginshu=0
 end if
 nowlogintimes=loginshu+1
 rs("logintimes")=nowlogintimes
rs("shangcilogintime")=rs("lastlogintime")
 rs("lastlogintime")=now

rs.update
 end if
 '---------------------------
if rs.recordcount >= 1 then 
  if access="teacher" then
id = rs("id")
login = rs("login")
 session("jg_id") = id
 session("jg_login") = login
name=rs("name")
session("jg_name") = name
'insert adminaccdiary

ip11 = Request.ServerVariables("HTTP_X_FORWARDED_FOR") '　代理IP
ip22 =Request.ServerVariables("REMOTE_ADDR") 
if ip11 = "" then
ipjg = ip22
else
ipjg = ip11
end if
jgpcname=Request.ServerVariables("HTTP_USER_AGENT")
sql_jgdiary="select * from jg_login"
set rs_jgdiary=server.CreateObject("adodb.recordset")
rs_jgdiary.open sql_jgdiary,conn,1,2
rs_jgdiary.addnew
      rs_jgdiary("id")=id
      rs_jgdiary("login")=login
      rs_jgdiary("name")=name
      rs_jgdiary("logintime")=now
      rs_jgdiary("loginip")=ipjg
	  rs_jgdiary("os")=jgpcname
      rs_jgdiary.update
	  rs_jgdiary.close
	  set rs_jgdiary=nothing
	  

	  '////////////////////////////////////////////////////
else
admin_id=rs("admin_id")
session("admin_id")=admin_id
adminlogin=rs("adminlogin")
adminname=rs("adminname")
session("adminlogin")=adminlogin
'name
adminname=rs("adminname")
session("adminname")=adminname
'------------------------------------------
'insert adminaccdiary

ip1 = Request.ServerVariables("HTTP_X_FORWARDED_FOR") '　代理IP
ip2 =Request.ServerVariables("REMOTE_ADDR") 
if ip1 = "" then
ip = ip2
else
ip = ip1
end if
pcname=Request.ServerVariables("HTTP_USER_AGENT")
sql_admindiary="select * from admin_login"
set rs_admindiary=server.CreateObject("adodb.recordset")
rs_admindiary.open sql_admindiary,conn,1,2
rs_admindiary.addnew
      rs_admindiary("admin_id")=admin_id
      rs_admindiary("adminlogin")=adminlogin
      rs_admindiary("adminname")=adminname
      rs_admindiary("logintime")=now
      rs_admindiary("loginip")=ip
	  rs_admindiary("os")=pcname
      rs_admindiary.update
	  rs_admindiary.close
	  set rs_admindiary=nothing
	  '////////////////////////////////////////////////////
	  
adminleverhigh=rs("adminleverhigh")
session("adminleverhigh")=adminleverhigh
adminleverdb=rs("adminleverdb")
session("adminleverdb")=adminleverdb
adminleverjg=rs("adminleverjg")
session("adminleverjg")=adminleverjg
adminleverjgadd=rs("adminleverjgadd")
session("adminleverjgadd")=adminleverjgadd
adminleverjgupdate=rs("adminleverjgupdate")
session("adminleverjgupdate")=adminleverjgupdate
adminleverjgdel=rs("adminleverjgdel")
session("adminleverjgdel")=adminleverjgdel
end if
   session("login") = login
  Response.Redirect url
  rs.close
else
 	response.write "<script language=JavaScript>{window.alert('對不起，您的帳號或密碼錯誤!請核實后重新登錄；如果您確定帳號和密碼無誤，那可能是您的資料也被管理員修改或刪除，請聯系管理員');window.history.go(-1);}</script>"
    response.end
    rs.close
end if
%>