% If Session("User_Account")="" Then Call AlertUrl("请先登陆!","Index.asp") Response.End End if %> <% if Request("action")="login" Then if Request.Form("code")<>Session("GetCode") Then Call AlertUrl("验证码不正确!","PasswdApp.asp") Response.End End if set rs=Server.CreateObject("ADODB.recordset") sql="select * from User_Info where User_Account='"&Session("User_Account")&"'" rs.open sql,conn,3,3 if Request.Form("user")<>Session("User_Account") Then Call AlertUrl("用户名不正确!","PasswdApp.asp") Elseif Md5(Request.Form("pass"))<>rs("User_Password") Then Call AlertUrl("密码不正确!","PasswdApp.asp") Else Response.Redirect "PasswdAppStep2.asp" End if End if %>