<!--#INCLUDE FILE="Common/Inc_DatConn.asp"-->
<!--#include file="Common/Inc_Function.asp"-->
<%
'┌─  風云ASP在線  ────────────────────────┐
'│                                                                 │
'│  作者：趙振波.	http://www.fyasp.com	    				    │
'│                                                                 │
'│   Q Q：176189168  										   	    │
'│                                                                 │
'│ Email：fy96@163.com                                             │
'│                                                                 │
'│ 程序定做，系統開發，網站制作，提供高質量的網絡產品、技術和服務！│
'│                                                                 │
'│【版權聲明】                                                     │
'│                                                                 │
'│     本程序版權歸坐看風云所有，未經授權擅自修改、復制或散布本程序│
'│                                                                 │
'│的部分或全部，將承受嚴厲的民事和刑事處罰，對已知的違反者將給予法 │
'│                                                                 │
'│律范圍內的全面制裁。對非法使用此程序所造成的一切后果本人概不負責!│
'│                                                                 │
'└───────────────────  http://www.fyasp.com ──┘
%>
<%
'/驗證系統用戶賬戶及管理密碼/
Dim rdsMember    	'/創建會員賬號訪問對象/
Dim sqlMember       '/創建SQL語句/
Dim strMember   	'/會員賬號/
Dim strPassWord  	'/管理密碼/
Dim sqlUpdateMember
strMember =Replace(Trim(Request.Form("Member")),"'","")
strPassWord = Replace(Trim(Request.Form("Password")),"'","")
dim lailu           '/提交來路/
strMember =changechr(Request.Form("Member"))
strPassWord = changechr(Request.Form("Password"))
lailu=Request.ServerVariables("HTTP_REFERER")
yuming=request.servervariables("server_name")
if InStr(""&lailu&"",""&yuming&"")>0 then

set rdsMember = Server.CreateObject("ADODB.Recordset")
sqlMember = "Select * From Dat_Member Where Member = '"& strMember &"'"
rdsMember.Open sqlMember,Conn
if not rdsMember.EOF then
	if strPassWord = rdsMember("PassWord") then
		if rdsMember("State") = 0 then
			Session("boobuser") = strMember
			Session("boobpass") = strPassword
			Session("intMemberKey") = rdsMember("MemberKey")
			Session("gqjb") = rdsMember("jb")		
			
			sqlUpdateMember = "Update Dat_Member Set LoginCount = LoginCount + 1 Where MemberKey = "& rdsMember("MemberKey") &""
			Conn.Execute sqlUpdateMember
			
			Response.Redirect "index.asp"
		else
			Response.Write "<script>alert(""\對不起！您的會員帳號已被禁止登錄，請與管理員聯系！"");window.location='Javascript:history.back()';</script>"
		end if
	else
		Response.Write "<script>alert(""\您輸入的密碼不正確，請重新輸入！"");window.location='Javascript:history.back()';</script>"
	end if
else
	Response.Write "<script>alert(""\您輸入的會員帳號不存在，請重新輸入！"");window.location='Javascript:history.back()';</script>"
end if
rdsMember.Close
set rdsMember = nothing
else
	Response.Write "<script>alert(""\本站拒絕遠程登錄！"");window.location='Javascript:history.back()';</script>"
end if
%>