<!--#include file="conn.asp"-->
<!--#include file="md5.asp"-->
<%
name=request.form("username")
pwd=md5(trim(request("pwd")))
if name<>"" and pwd<>"" then
set rs=server.CreateObject("ADODB.RecordSet")
sql="select * from userinfo where name='"&name&"' and pwd='"&pwd&"'"
on error resume next
rs.open sql,conn,1,3
if rs.eof or rs.bof then
response.Write "<script language=javascript>alert('用戶名或密碼錯誤！');history.go(-1);</script>"
response.End
else
rs("logins")=rs("logins")+1
rs("lastlogin")=now()
rs("lastip")=Request.ServerVariables("REMOTE_ADDR")
rs.update
session.Timeout=2000
session("userid")=rs("userid")
session("name")=rs("name")
session("oskey")=rs("oskey")
session("depid")=rs("depid")
session("logins")=rs("logins")
rs.update
rs.close
conn.close
set rs=nothing
set conn=nothing
response.redirect "index.asp"
response.end
end if
end if
%>