% if Request("act")="login" Then set rst=conn.execute("Select * from User_Info Where User_Account='"&trim(Request.Form("User_Account"))&"' And User_Password='"&Md5(trim(Request.Form("User_Password")))&"'") if Not rst.eof then Session("User_Account")=Request.Form("User_Account") Response.Cookies("User_Account")=rs("User_Account") Response.Cookies("User_Password")=rs("User_Password") Response.Cookies("User_Account").expires=date+365 set rst=nothing Call AlertBack("成功登陆","AddItem.asp") Else Call AlertBack("密码不正确") End if End if %>
|
||||
<%
If Session("User_Account")<>"" Then
%>
|
||||