%@LANGUAGE="JAVASCRIPT" CODEPAGE="936" %> <% if(Request.ServerVariables("REQUEST_METHOD")=="POST") { //定义变量 var strUserName,strPassword,sql; var dNowDate,dStartTime,dEndTime,strNowDate; var strYear, strMonth, strDate; var strUserID, strUserLevel; //获取当前时间 dNowDate = new Date(); strNowDate = formatNomalDate(dNowDate); dNowDate = formatDate(dNowDate); //获取提交的数据 strUserName = Request.Form("username").item; strPassword = Request.Form("password").item; //判断参数是否有效 if(strUserName=="" || strUserName ==null) { %> <% } if(strPassword=="" || strPassword ==null) { %> <% } conn.Open (ConnStr); sql="SELECT UserID, Password, UserLevel, StartTime, EndTime FROM Login WHERE UserName='"+strUserName+"'"; rs = conn.Execute(sql); if(rs.Eof) { rs.Close(); %> <% }else { if(strPassword==rs("Password")) //密码匹配 { //时间有效性 dStartTime = formatDate(new Date(rs.fields("StartTime").value)); dEndTime = formatDate(new Date(rs.fields("EndTime").value)); strUserID = rs.fields("UserID").value; strUserLevel = rs.fields("UserLevel").value; rs.Close(); if( dNowDate >= dStartTime && dNowDate <= dEndTime ) { Session("UserName") = strUserName; Session("UserID") = strUserID; Session("UserLevel") = strUserLevel; Session("StartTime") = dStartTime; Session("EndTime") = dEndTime; sql="UPDATE Login SET LastLogDate = '"+ strNowDate +"' WHERE UserName = '"+ strUserName +"' "; conn.Execute(sql); }else { Session("UserName") = null; Session("StartTime") = null; Session("EndTime") = null; Session("UserID") = null; Session("UserLevel") = null; %> <% } } else { Session("UserName") = null; Session("StartTime") = null; Session("EndTime") = null; Session("UserID") = null; Session("UserLevel") = null; %> <% } } conn.Close(); } %>