%@ Language=VBScript%>
<%
Response.Buffer=true
Response.Expires=0
%>
<%
myurl="user_login.asp"
tablename="userinfo"
mymenu="usercenter"
set cn = Server.CreateObject("ADODB.Connection")
cn.Open(mycnstr)
set rs = Server.CreateObject("ADODB.Recordset")
set rs2 = Server.CreateObject("ADODB.Recordset")
bz=1
if Request.ServerVariables("REQUEST_METHOD")="POST" then
usercode=trim(Request.Form("usercode"))
userpass=Lcase(trim(Request.Form("userpass")))
cookieqx=Lcase(trim(Request.Form("cookieqx")))
loginflag=Lcase(trim(Request.Form("loginflag")))
sql="select userno,userpass,flag,state,logintime,logincount,ipaddress from userinfo where usercode='"+usercode+"' and state='1'"
rs.Open sql,cn,1,3
if rs.EOF then
bz=2
else
oldpass=Lcase(trim(rs(1)))
if oldpass=userpass then
bz=0
rs("logintime")=now()
rs("logincount")=rs("logincount")+1
rs("ipaddress")=Request.ServerVariables("Remote_HOST")
rs.Update
Response.Cookies("usercode")=usercode
Response.Cookies("userpass")=userpass
Response.Cookies("loginflag")=loginflag
select case cookieqx
case "1"
Response.Cookies("usercode").Expires=now()+1
Response.Cookies("userpass").Expires=now()+1
Response.Cookies("loginflag").Expires=now()+1
case "2"
Response.Cookies("usercode").Expires=now()+30
Response.Cookies("userpass").Expires=now()+30
Response.Cookies("loginflag").Expires=now()+30
case "3"
Response.Cookies("usercode").Expires=now()+365
Response.Cookies("userpass").Expires=now()+365
Response.Cookies("loginflag").Expires=now()+365
end select
Session("userno")=rs(0)
Session("usercode")=usercode
Session("userflag")=rs("flag")
userno=rs(0)
cn.Execute "delete from user_login where userno="&userno&" or keyno="&Session.SessionID
if databaseflag="access" then
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+usercode+"',now(),now(),'','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
else
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+usercode+"',getdate(),getdate(),'','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
end if
cn.Execute sql
Response.Redirect("http://www.abcsydney.com/cn/forum")
else
bz=2
Session.Abandon
end if
end if
rs.Close
end if
%>
<%
mybz=0
set rsb1 = Server.CreateObject("ADODB.Recordset")
set rsb2 = Server.CreateObject("ADODB.Recordset")
if Session("userno")="" then
c_usercode=Request.Cookies("usercode")
c_userpass=Request.Cookies("userpass")
c_loginflag=Request.Cookies("loginflag")
if c_usercode<>"" then
sql="select userno,userpass,flag,state,logintime,logincount,picfile,ipaddress from userinfo where usercode='"+c_usercode+"' and state='1'"
rsb1.Open sql,cn,1,3
if rsb1.EOF then
else
oldpass=Lcase(trim(rsb1(1)))
if oldpass=c_userpass then
mybz=1
rsb1("logintime")=now()
rsb1("logincount")=rsb1("logincount")+1
rsb1("ipaddress")=Request.ServerVariables("Remote_HOST")
rsb1.Update
Session("userno")=rsb1(0)
Session("usercode")=c_usercode
Session("userflag")=c_loginflag
userno=rsb1(0)
cn.Execute "delete from user_login where userno="&userno&" or keyno="&Session.SessionID
if databaseflag="access" then
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+c_usercode+"',now(),now(),'"+classcode+"','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
else
sql="Insert into user_login values ("&Session.SessionID&","&userno&",'"+c_usercode+"',getdate(),getdate(),'"+classcode+"','"+loginflag+"','"+Request.ServerVariables("Remote_HOST")+"')"
end if
cn.Execute sql
end if
end if
rsb1.Close
end if
end if
if mybz=0 then
sql="select * from user_login where keyno="&Session.SessionID
rsb2.Open sql,cn,1,3
if not rsb2.EOF then
rsb2("updatetime")=now()
rsb2("classcode")=classcode
else
rsb2.Addnew
rsb2("keyno")=Session.SessionID
rsb2("userno")=0
rsb2("logintime")=now()
rsb2("updatetime")=now()
rsb2("loginflag")="0"
rsb2("ipaddress")=Request.ServerVariables("Remote_HOST")
rsb2("classcode")=classcode
end if
rsb2.Update
rsb2.Close
end if
%>