<!--#include file="Conn.asp"-->
<!--#include file="Inc/md5.asp"-->
<%
'=====初始化系統(tǒng)變量=======
Set rs = Server.CreateObject("ADODB.RecordSet")
sql = "Select * From [config] Where nowused = 1"
rs.Open sql,conn,1,1
if rs.bof or rs.eof then
	Response.Write("<script>alert('對不起，系統(tǒng)發(fā)生未知錯誤，請重新登陸！');window.history.back();</script>")
	Response.End()
else
	Session("refuseIP") = rs("refuseIP")
	Session("refuseIPsect") = rs("refuseIPsect")
	Session("isOpen") = rs("isOpen")
	Session("isSearch") = rs("isSearch")
end if
rs.close()
'==========================
%>
<%
dim userid,userpass,userpower
userid = Trim(Request.Form("userid"))
userpass = Trim(Request.Form("userpass"))
userpower = Trim(Request.Form("userpower"))
if userid = "" then
	Response.Write("<script>alert('對不起，請輸入用戶名！');window.history.back();</script>")
	Response.End()
elseif userpass = "" then
	Response.Write("<script>alert('對不起，您輸入密碼！');window.history.back();</script>")
	Response.End()
end if

Set rs = Server.CreateObject("ADODB.RecordSet")
sql = "Select * From [userinfo] Where userid = '"&userid&"'"
rs.Open sql,conn,1,1
if rs.BOF or rs.EOF then
	Response.Write("<script>alert('對不起，您輸入的用戶名不存在！');window.history.back();</script>")
	Response.End()
elseif userpass <> rs("userpass") then
'elseif md5(userpass) <> rs("userpass") then
	Response.Write("<script>alert('對不起，您輸入的密碼不正確！');window.history.back();</script>")
	Response.End()
elseif userpower <> rs("userpower") then
	Response.Write("<script>alert('對不起，您登陸的身份不對，請選擇正確的身份登陸！');window.history.back();</script>")
	Response.End()
else
	Session("UID") = rs("id")
	Session("Username") = rs("userid")
	Session("Userpower") = rs("userpower")
	if rs("userpower") = 10 then
		Session("Admin") = true
	end if
end if
rs.Close()
set rs = Nothing
'寫入登陸信息
conn.Execute("Update [userinfo] Set loginTimes = loginTimes + 1, loginSessionID = '"&Session.SessionID&"' Where id = " & Session("UID"))

if Session("Username") <> "" then
	Response.Redirect "Main.htm"
end if

CloseDatabase
%>