<!--#include file="conn.asp"-->
<!--#include file="md5.asp"-->
<%dim username,userpassword,comeurl
username=replace(trim(request("username")),"'","")
userpassword=trpass(replace(trim(request("userpassword")),"'",""))
if trim(request("comeurl"))="" then
comeurl="index.asp"
else
comeurl=trim(request("comeurl"))
end if
if username="" or userpassword="" then
response.Write "<center><a href=login.asp><font color=red size=2>对不起，登陆失败，请检查您的登陆名和密码</font></a></center>"
response.end
end if
set rs=server.CreateObject("adodb.recordset")
rs.Open "select * from [user] where username='"&username&"' and passwd='"&userpassword&"' " ,conn,1,3
if not(rs.bof and rs.eof) then
if userpassword=rs("passwd") then
response.Cookies("bookshop")("username")=trim(request("username"))
'response.Cookies("bookshop").expires=date+1


rs.Update
rs.Close
set rs=nothing
call loginok()
else
response.write "<script LANGUAGE='javascript'>alert('对不起，您的用户名或密码有误！');history.go(-1);</script>"
end if
else
response.write "<script LANGUAGE='javascript'>alert('对不起！您的用户名或密码有误！');history.go(-1);</script>"
end if
sub loginok()
response.Write "<font size=2>欢迎您 <font color=red size=2>"&request.Cookies("bookshop")("username")&"</font>，两秒种后将自动跳转到相应页！</font>"
response.redirect "index.asp"
end sub
%>
