<!--#include file="conn.asp"-->
<!--#include file="md5.asp"-->
<%
name=request.form("username")
pwd=md5(trim(request("pwd")))
if name<>"" and pwd<>"" then
set rs=server.CreateObject("ADODB.RecordSet")
sql="select * from userinfo where name='"&name&"' and pwd='"&pwd&"'"
on error resume next
rs.open sql,conn,1,3
if rs.eof or rs.bof then
response.Write "<script language=javascript>alert('用戶名或密碼錯誤！');history.go(-1);</script>"
response.End
else
rs("logins")=rs("logins")+1
rs("lastlogin")=now()
rs("lastip")=Request.ServerVariables("REMOTE_ADDR")
rs.update
session.Timeout=60
Response.Cookies("oskey") = rs("oskey")
Response.Cookies("userid") = rs("userid")
Response.Cookies("name") = rs("name")
Response.Cookies("fullname") = rs("fullname")
Response.Cookies("depid") = rs("depid")
Response.Cookies("logins") = rs("logins")
Response.Cookies("oskey").Expires=Date+1
Response.Cookies("userid").Expires=Date+1
Response.Cookies("name").Expires=Date+1
Response.Cookies("depid").Expires=Date+1
Response.Cookies("logins").Expires=Date+1
Response.Cookies("fullname").Expires=Date+1
rs.update
rs.close
conn.close
set rs=nothing
set conn=nothing
response.redirect "index.asp"
response.end
end if
end if
%>