<!--#INCLUDE FILE="data.asp" -->

<%
if request("username")="" and request("password")="" then
	Session("Ulogin")="no"
	Response.Redirect("login.asp?id=error")
else

	Uname=request("username")
	Upass=request("password")
	IP= Request.ServerVariables("REMOTE_ADDR")
    nowtime=now()
    sj=cstr(year(nowtime))+"-"+cstr(month(nowtime))+"-"+cstr(day(nowtime))+" "+cstr(hour(nowtime))+":"+right("0"+cstr(minute(nowtime)),2)+":"+right("0"+cstr(second(nowtime)),2)
	shijian=cstr(year(nowtime))+right("0"+cstr(month(nowtime)),2)+right("0"+cstr(day(nowtime)),2)+right("0"+cstr(hour(nowtime)),2)+right("0"+cstr(minute(nowtime)),2)
  
	Set rs= Server.CreateObject("ADODB.Recordset") 
	strSql="select * from user where 用戶名='"&Uname&"' and 密碼='"&Upass&"'"
	rs.open strSql,Conn,1,3 
	if rs.eof then
		Session("Ulogin")="no"
		response.redirect "login.asp?id=error"
		
    else  
		if rs("審核")=false then
			response.redirect "login.asp?id=pass"
		end if
		'response.write rs("登陸時間")
		'response.end
		rs("狀態")=true
		rs("登陸IP")=IP
		rs("Utime")=shijian
		rs("times")=rs("times")+1
		
		rs.update
		Session("Uid")=rs("id")
		Session("Uname")=rs("用戶名")
		Session("Rname")=rs("姓名")
		Session("Upass")=rs("密碼")
		Session("Upart")=rs("部門")
		Session("Urule")=rs("權限")
		Session("tel")=rs("電話")
		Session("Utime")=rs("Utime")
		Session("IP")=rs("登錄IP")
		Session("Ulogin")="yes"
		Session("email")=rs("信箱")
		session("mobile")=rs("mobile")
		session("time")=rs("時間")
		
		'----------------郵箱系統專用環境變量,請勿刪除-------------------
			Session("id")="" & rs("用戶名")
			Session("pwd")="" & rs("密碼")
			Session("level")= "" & rs("ilevel")
			Session("iPageSize")=rs("iPageSize")
			Session("iAdd")="" & rs("iAdd")
			Session("iBegin")="" & rs("iBegin")
			Session("num")=0
		'----------------郵箱系統專用環境變量,請勿刪除-------------------
		response.redirect("main.asp")
	%>


<script language="JavaScript">
<!--
function tmt_fullscreen(url, scrollo) {
    var larg_schermo = screen.availWidth - 10;
    var altez_schermo = screen.availHeight - 75;
    window.open(url, "", "width=" + larg_schermo + ",height=" + altez_schermo + ",top=0,left=0,menubar=yes,scrollbars=yes" );
}
//tmt_fullscreen("main.asp");


// -->

<%
	end if
end if
%>
<% rs.Close %>
<% Conn.Close %>
<% set Conn = nothing 
%>
</script>