% Dim SQLCmd, sLogin_U, SLogin_P, Rs, login_Type login_Type=Request("LT") select case login_Type case "login" sLogin_U = Trim(Request.Form("Login_U")) sLogin_U = replace(sLogin_U,"'","") sLogin_P = Trim(Request.Form("Login_P")) sLogin_P = replace(sLogin_P,"'","") SQLCmd= "SELECT Manager_Name as Login_Name, Manager_Password as Login_PW" SQLCmd= SQLCmd & " FROM Board_Manager" SQLCmd= SQLCmd & " WHERE Manager_Name='" & sLogin_U & "'" SQLCmd= SQLCmd & " AND Manager_Password = '" & sLogin_P &"'" Set Rs=Server.CreateObject("ADODB.Recordset") Rs.open SQLCmd, conn, 3, 3 if Rs.RecordCount =1 then session("Login")= 1 else session("Login")= 0 %>
| 登入未成功, 請重新登入。 |