<%
If IsEmpty(Session("Passed")) then
Session("Passed")=False
End If
If Session("Passed")=False Then
UserName = Request.Form("name")
UserPwd = Request.Form("pwd")
If UserName ="" or UserPwd =""Then
Errmsg = "请输入用户名或密码!"
Else
set conn =Server.CreateObject("ADODB.Connection")
//连接数据库DMS,设置登录数据库用户名uid=sa;密码pwd=sa,服务器为local;
sql ="Driver={SQL Server};Server=(Local);uid=sa;pwd=sa;database=DMS"
//打开数据库
conn.open(sql)
Set rs = Server.CreateObject("ADODB.Recordset")
Set rs.ActiveConnection = conn
rs.CursorType = 3
rs.Open "Select * From admin WHERE name='" & Trim(UserName) & "'"
If rs.EOF Then
Errmsg ="用户名不存在,请重新输入!"
Else
If UserPwd <> rs.Fields("password") Then
Errmsg ="密码错误,请重新输入!"
Else
Errmsg=""
Session("Passed") = True
Session("UserName") = rs.Fields("name")
Response.Redirect("admindex.asp")
End if
End if
End if
End if
If Not Session("Passed") Then
%>
<HTML>
<HEAD><TITLE>请输入用户名和密码</TITLE><link rel="stylesheet" href="style.css">
<style type="text/css">
<!--
input {
height: 20px;
width: 100px;
}
-->
</style>
</HEAD>
<BODY>
<p align="center"><font color="#0000FF" size="5" face="隶书">身 份 验 证</font></p>
<p align="center"><font color="#800000"> <%=Errmsg%></font></p>
<form method="POST" action="<%=Request.ServerVariables("PATH_INFO")%>" name="MyForm">
<p align="center">用户名: <input name="name" type="text" id="name" size="20">
</p>
<p align="center">密 码: <input name="pwd" type="password" id="pwd" size="20">
</p>
<p align="center"><input type="submit" value="提交" name="B1"> <input type="reset" value="重置" name="B2">
</p>
</form>
<p align="center"> </p>
</BODY>
</HTML>
<%
Response.End
End If
%>