%@ Language=VBScript%>
<%
Response.Buffer=true
Response.Expires=0
%>
<%
set cn = Server.CreateObject("ADODB.Connection")
cn.Open(mycnstr)
set rs = Server.CreateObject("ADODB.Recordset")
sqltext="select title,content from miscell where classcode='999' and sortnum=99"
rs.Open sqltext,cn,1,1
if not rs.EOF then
title=trim(rs("title"))
content=trim(rs("content"))
end if
rs.Close
%>
<%
mybz=0
set rsb1 = Server.CreateObject("ADODB.Recordset")
set rsb2 = Server.CreateObject("ADODB.Recordset")
if Session("userno")="" then
c_usercode=Request.Cookies("usercode")
c_userpass=Request.Cookies("userpass")
c_loginflag=Request.Cookies("loginflag")
if c_usercode<>"" then
sql="select userno,userpass,flag,state,logintime,logincount,picfile,ipaddress from userinfo where usercode='"+c_usercode+"' and state='1'"
rsb1.Open sql,cn,1,3
if rsb1.EOF then
else
oldpass=Lcase(trim(rsb1(1)))
if oldpass=c_userpass then
mybz=1
rsb1("logintime")=now()
rsb1("logincount")=rsb1("logincount")+1
rsb1("ipaddress")=Request.ServerVariables("Remote_HOST")
rsb1.Update
Session("userno")=rsb1(0)
Session("usercode")=c_usercode
Session("userflag")=c_loginflag
userno=rsb1(0)
cn.Execute "delete from user_login where userno="&userno&" or keyno="&Session.SessionID
if databaseflag="access" then
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+c_usercode+"',now(),now(),'"+classcode+"','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
else
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+c_usercode+"',getdate(),getdate(),'"+classcode+"','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
end if
cn.Execute sql
end if
end if
rsb1.Close
end if
end if
if mybz=0 then
sql="select * from user_login where keyno="&Session.SessionID
rsb2.Open sql,cn,1,3
if not rsb2.EOF then
rsb2("updatetime")=now()
rsb2("classcode")=classcode
else
rsb2.Addnew
rsb2("keyno")=Session.SessionID
rsb2("userno")=0
rsb2("logintime")=now()
rsb2("updatetime")=now()
rsb2("loginflag")="0"
rsb2("ipaddress")=Request.ServerVariables("Remote_HOST")
rsb2("classcode")=classcode
end if
rsb2.Update
rsb2.Close
end if
%>