<!--#include file="conn.asp" -->
<!--#include file="md5.asp" -->
<%

userid=Trim(Request.Form("userid"))
password=Trim(Request.Form("password"))
username=Trim(Request.Form("userid"))

if Instr(username,"=")>0 or Instr(username,"%")>0 or Instr(username,chr(32))>0 or Instr(username,"?")>0 or Instr(username,"&")>0 or Instr(username,";")>0 or Instr(username,",")>0 or Instr(username,"'")>0 or Instr(username,",")>0 or Instr(username,chr(34))>0 or Instr(username,chr(9))>0 or Instr(username,"")>0 then
	Response.redirect "admin.asp?w=1"
	else
if Instr(password,"=")>0 or Instr(password,"%")>0 or Instr(password,chr(32))>0 or Instr(password,"?")>0 or Instr(password,"&")>0 or Instr(password,";")>0 or Instr(password,",")>0 or Instr(password,"'")>0 or Instr(password,",")>0 or Instr(password,chr(34))>0 or Instr(password,chr(9))>0 or Instr(password,"")>0 then
	Response.redirect "admin.asp?w=1"
	else
	end if 
	end if
if instr(userid,"'")<>0 or instr(password,"'")<>0 then
Response.redirect "error.asp"
end if 
sql="select * from user where userid='"&userid&"' and password='"&md5(password)&"'"
rs.open sql,conn,1,1
if rs.eof then
Response.redirect "error.asp"
Response.end
end if
session("us_email")=rs("email")
session("dl")=rs("sf") 
session("us")=rs("userid")
session("us_ps")=md5(password)
session("usdl_province")=rs("province")
session("usdl_name")=rs("name")
session("usdl_ename")=rs("ename")
session("usdl_tel")=rs("tel")
session("usdl_biz")=rs("biz")
session("usdl_biz")=rs("biz")
session("usdl_biz")=rs("biz")
session("usdl_cz")=rs("cz")
session("usdl_cz")=rs("cz")
session("usdl_eaddress")=rs("eaddress")
session("usdl_address")=rs("address")
session("usdl_unit")=rs("unit")
session("usdl_eunit")=rs("eunit")



 session(Verification&"sel")=true
rs.close
rs.open "select * from matter where class="&session("dl"),conn,1,1
 if not rs.eof then
 dl=rs("matter")
 else
 dl="注册用户"
 end if
rs.close
sql="select * from user where userid='"&userid&"'"
rs.open sql,conn,2,3
if not rs.eof then
 rs("dl")=dl
 rs("lastdat")=now()
 rs("dlnum")=rs("dlnum")+1
 rs.update
else
Response.Write("对不起!!出现错误,请和管理员联系")
end if 
call CloseDatabase()
response.redirect "user.asp"
 %>
























