}else{
        var CheckCode = 0;
    }
    var CookieDate = $F('CookieDate');
    if(UserName==''){
        $('loginerr').innerHTML = "请填写用户名!";
        Element.show('loginerr');
        Field.focus('UserName');
    }else{
        if(Password==''){
            $('loginerr').innerHTML = "请填写密码!";
            Element.show('loginerr');
            Field.focus('UserPassword');
        }else{
            if(checktype=='1' && CheckCode==''){
                $('loginerr').innerHTML = "请填写验证码!";
                Element.show('loginerr');
                Field.focus('CheckCode');
            }else{
                $('UserLogin').innerHTML = "验证中...";
                var checkurl = siteroot + "User/User_ChkLogin.asp?action=xml";

                // creat user xml file
                var xml_dom = new ActiveXObject("Microsoft.XMLDOM");
                xml_dom.async=false;
                var xmlproperty = xml_dom.createProcessingInstruction("xml","version=\"1.0\" encoding=\"gb2312\"");  
                xml_dom.appendChild(xmlproperty); 
                var objRoot = xml_dom.createElement("root");
                var objField = xml_dom.createNode(1,"username",""); 
                objField.text = UserName;
                objRoot.appendChild(objField);
                objField = xml_dom.createNode(1,"password",""); 
                objField.text = Password;
                objRoot.appendChild(objField);
                objField = xml_dom.createNode(1,"checkcode",""); 
                objField.text = CheckCode;
                objRoot.appendChild(objField);
                objField = xml_dom.createNode(1,"cookiesdate","");
                if(CookieDate>0){
                    objField.text = CookieDate;
                }
                objRoot.appendChild(objField);
                xml_dom.appendChild(objRoot);

                // send to server
                var userhttp = getHTTPObject();
                userhttp.open("POST",checkurl,false);
                userhttp.onreadystatechange = function () 
                {
	            if (userhttp.readyState == 4 && userhttp.status==200){
                       ShowLoginForm(userhttp);	
                   }else{
                       reportError();
	            }
                }
                userhttp.send(xml_dom);
            }
        }
    }
}

function GetNewMessage()
{ 
    var url = siteroot + "User/User_ChkLogin.asp";
    var pars = "action=xmlstat";
    var myAjax = new Ajax.Request(url, {method: 'get', parameters: pars, onComplete: ShowNewMessage});
}

function ShowNewMessage(originalRequest)
{
    var xml2 = new ActiveXObject("Microsoft.XMLDOM");
    xml2.async = false;
    xml2.load(originalRequest.responseXml);
    var root2 = xml2.getElementsByTagName("body/unreadmessage");
    var msgstat2 = root2.item(0).getElementsByTagName("stat").item(0).text;
    var messageloop2 = root2.item(0).getElementsByTagName("item");
    messagecur = messageloop2.length;
    if(messagecur != messageold){
        messageold = messagecur;
        ShowLoginForm(originalRequest);
    }
}

function havemessage()
{
    $('usermessage').className='havemessaged';
}

function hidemessage()
{
    $('usermessage').className='havemessage';
}

function UserLogout()
{
    var strTempHTML="";
    var dtime = 0;
    var outurl = siteroot + "User/User_Logout.asp?action=xml";
    var userhttp = getHTTPObject();
    userhttp.open("POST",outurl,false);
    userhttp.onreadystatechange = function () 
    {
        if (userhttp.readyState == 4) {
            if (userhttp.status==200){
                var xml; 
                xml = new ActiveXObject("Microsoft.XMLDOM");
                xml.async=false;
                xml.load(userhttp.responseXml);

                var root = xml.getElementsByTagName("body");
                if(root.length == 1){
                    var syskey = root.item(0).getElementsByTagName("syskey");
                    if (syskey.length == 1) {
                        var iUrls = root.item(0).getElementsByTagName("apiurl");
                        for (var i=0; i<iUrls.length; i++){
                            dtime = dtime + 2000;
                            strTempHTML += "<iframe frameborder=\"0\" width=\"1\" height=\"1\" src=\"" + iUrls.item(i).text + "?syskey=" + syskey.item(0).text + "&username=" + username + "\" \/>";
                        }
                        if (iUrls.length > 0) $('UserLogin').innerHTML = "logouting..." + strTempHTML;
                    }
                }
                var dd = setTimeout("ShowUserLogin()",dtime);
            }else{
                reportError();
            }
        }
    }
    userhttp.send();
}

function reportError()
{
    $('UserLogin').innerHTML = "<a href=\"#\" onclick=\"ShowUserLogin();\">&#x9519;&#x8BEF;,&#x670D;&#x52A1;&#x5668;&#x65E0;&#x54CD;&#x5E94;!</a>";
}

function refreshimg(){
    document.all.checkcode.src = siteroot + "inc/checkcode.asp";
}

var glabelid;
var gvalue;
var gurl;
var gtime;
var dstat=0;

// *****************
// dynapage part 
// *****************
function ShowDynaPage(labelid,ipage,tflash,rootdir,value)
{
    var pagename = "dyna_page_" + labelid;
    $(pagename).innerHTML = "updateing...";
    gurl = rootdir + "dyna_page.asp";

    glabelid = labelid;
    gtime = tflash;

    // creat send xml file
    var dy_dom = new ActiveXObject("Microsoft.XMLDOM");
    dy_dom.async=false;
    var xmlproperty = dy_dom.createProcessingInstruction("xml","version=\"1.0\" encoding=\"gb2312\"");  
    dy_dom.appendChild(xmlproperty); 
    var objRoot = dy_dom.createElement("root");
    var objField = dy_dom.createNode(1,"id",""); 
    objField.text = labelid;
    objRoot.appendChild(objField);
    objField = dy_dom.createNode(1,"rootdir",""); 
    objField.text = rootdir;
    objRoot.appendChild(objField);
    objField = dy_dom.createNode(1,"page",""); 
    objField.text = ipage;
    objRoot.appendChild(objField);
    objField = dy_dom.createNode(1,"value","");
    objField.text = value;
    objRoot.appendChild(objField);
    dy_dom.appendChild(objRoot);
    gvalue = dy_dom;
    // sent to server
    var dyhttp = getHTTPObject();
    dyhttp.open("POST",gurl,false);
    dyhttp.onreadystatechange = function () 
    {
	if (dyhttp.readyState == 4 && dyhttp.status==200)
	{
        //$("dyna_body_" + labelid).innerHTML = dyhttp.responseText
        DynaPageResponse(dyhttp,labelid,tflash);		
	}
    }
    dyhttp.send(dy_dom);
    if(parseInt(tflash)>9){
        if(dstat==0){
            dstat=1;
            new PeriodicalExecuter(reFlashDynaPage,parseInt(tflash));
        }
    }
}

function reFlashDynaPage()
{
    var pagename1 = "dyna_page_" + glabelid;
    $(pagename1).innerHTML = "updateing...";

    // sent to server
    var fdyhttp = getHTTPObject();
    fdyhttp.open("POST",gurl,false);