请帮我看看下面这段asp登陆代码哪里有问题

来源:百度知道 编辑:UC知道 时间:2024/07/07 17:12:19
输入空用户,空密码,错误用户或密码都正确响应

只是当输入正确的用户名和密码的时候仍然提示“密码错误”

搞了一下午不知道哪里有问题。。

check.asp 代码如下

<!--#include file="conn.asp" -->
<%
na = trim(request("username"))
password = trim(request("psw"))

if password = "" then
conn.close
set conn = nothing
response.write "<script>alert('密码不能为空!');history.go(-1);</script>"
response.end

else if na = "" then
conn.close
set conn = nothing
response.write "<script>alert('用户名不能为空!');history.go(-1);</script>"
response.end
end if
end if

dim rs,sql
sql="select* from userinfo where username='"&na&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1

if rs.eof and rs.bof then
response.write "<script>ale

我把你的代码改了下,你试试:
<!--#include file="conn.asp" -->
<%
na = trim(request("username"))
password = trim(request("psw"))

if password="" or na="" then
response.write "<script>alert('用户名或密码不能为空!');history.go(-1);</script>"
end if

dim rs,sql
sql="select * from userinfo where username='"&na&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1

if rs.eof and rs.bof then
response.write "<script>alert('没有该用户!');history.go(-1);</script>"
else
if password=rs("password") then
session("name")=rs("username")
rs("onlinetime")=now
rs("userip")=Request.serverVariables("REMOTE_ADDR")
rs.update
session("userid")=cstr(rs2("useri