<!--#include file="inc/DB.INC" -->
<%
Function Sqlstr(data)
 	sqlstr=Replace(data,"'","''")
End Function
	userid=sqlstr(request.form("userid"))
	password=sqlstr(request.form("password"))
sql= "select userid,password from txluser where userid='"&userid&"' and password='"&password&"'"
set rs=conn.execute(sql)
if  rs.eof or  rs.bof then
%>
<script language="javascript">
alert("可能是你的同學ID或密碼輸入有誤！！")
parent.location.href="main.asp"
</script>
<%else
mysql="select truename,logcnt,logtime from [txluser] where userid='"&userid&"'"
set rs=Server.CreateObject ("ADODB.RECORDSET")
rs.open mysql,conn,1,3
rs("logcnt")=rs("logcnt")+1
rs("logtime")=now
truename=rs("truename")
rs.update
set rs=nothing
set conn=nothing
response.cookies("myuserid")=userid
response.cookies("mypwd")=password
session("myuserid")=userid
session("mypwd")=request.form("password")
Application("onuser")=truename
response.redirect "main.asp"
end if
%>