<!--#INCLUDE FILE="connection.asp" -->
<%
if request("username")="" and request("password")="" then
	Session("Ulogin")="no"
	Response.Redirect("index.htm")
else

	Uname=request("username")
	Upass=request("password")
	IP= Request.ServerVariables("REMOTE_ADDR")
    nowtime=now()
    sj=cstr(year(nowtime))+"-"+cstr(month(nowtime))+"-"+cstr(day(nowtime))+" "+cstr(hour(nowtime))+":"+right("0"+cstr(minute(nowtime)),2)+":"+right("0"+cstr(second(nowtime)),2)
	shijian=cstr(year(nowtime))+right("0"+cstr(month(nowtime)),2)+right("0"+cstr(day(nowtime)),2)+right("0"+cstr(hour(nowtime)),2)+right("0"+cstr(minute(nowtime)),2)
  
	Set rs= Server.CreateObject("ADODB.Recordset") 
	strSql="select * from user where 用戶名='"&Uname&"' and 密碼='"&Upass&"'"
	rs.open strSql,Conn,1,3 
	if rs.eof then
		Session("Ulogin")="no"
		response.redirect "login.asp?id=error"
		
    else  
		if rs("審核")=false then
		response.redirect "login.asp?id=pass"
		end if
		'response.write rs("登陸時(shí)間")
		'response.end
		rs("狀態(tài)")=true
		rs("登陸IP")=IP
                rs("Utime")=shijian
		rs("times")=rs("times")+1
		
		rs.update
		Session("Uid")=rs("id")
		Session("Uname")=rs("用戶名")
		Session("Rname")=rs("姓名")
		Session("Upass")=rs("密碼")
		Session("Upart")=rs("部門(mén)")
		Session("Urule")=rs("權(quán)限")
		Session("tel")=rs("電話")
		Session("Utime")=rs("Utime")
		'Session("IP")=rs("登錄IP")
                'response.write Session("IP")
		'response.end
		Session("Ulogin")="yes"
		Session("email")=rs("信箱")
		session("mobile")=rs("mobile")
		session("time")=rs("時(shí)間")

	%>


<script language="JavaScript">
<!--
function tmt_fullscreen(url, scrollo) {
    var larg_schermo = screen.availWidth - 10;
    var altez_schermo = screen.availHeight - 75;
    window.open(url, "", "width=" + larg_schermo + ",height=" + altez_schermo + ",top=0,left=0,menubar=yes,scrollbars=" + scrollo + "");
}
tmt_fullscreen("main.asp");


// -->

<%
	end if
end if
%>
<% rs.Close %>
<% Conn.Close %>
<% set Conn = nothing 
%>
</script>	
<script>
document.location.href="quit.asp"
</script>