asp完整登陆代码

asp完整登陆代码
<%
option explicit
'强制浏览器重新访问服务器下载页面，而不是从缓存读取页面
Response.Buffer = True
Response.Expires = -1
Response.ExpiresAbsolute = Now() - 1
Response.Expires = 0
Response.CacheControl = "no-cache"
'主要是使随机出现的图片数字随机
%>






css" rel=stylesheet type=text/css>






href="images/WEI.css" type=text/css rel=stylesheet>

用户名称：   用户密码：   验证码：                               src="inc/Code.asp" width="40" height="10" align="absmiddle">

下面是asp处理文件
 <%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>

<%
function ChkPost()
 dim server_v1,server_v2
 chkpost=false
 server_v1=Cstr(Request.ServerVariables("HTTP_REFERER"))
 server_v2=Cstr(Request.ServerVariables("SERVER_NAME"))
 if mid(server_v1,8,len(server_v2))<>server_v2 then
  chkpost=false
 else
  chkpost=true
 End if
End function
session.Timeout=20
if ChkPost=false then
  'emsg="请不要从其它站点提交表"
     response.Redirect("login.asp?emsg=请不要从其它站点提交表")
     Response.End()
End if

dim aname,apass,FoundErr,ErrMsg
FoundErr=False
aname=replace(trim(request("name")),"'","")
apass=replace(trim(request("pass")),"'","")
safecode=replace(trim(Request("safecode")),"'","")
if len(aname)>20 or len(aname)<3  then
   FoundErr=True
   ErrMsg=ErrMsg&"用户名不对！\n\n"
End if

if len(apass)>20 or len(apass)<6  then
   FoundErr=True
   ErrMsg=ErrMsg&"用户密码不对！\n\n"
End if
if Safecode="" then
 FoundErr=True
 ErrMsg=ErrMsg & "验证码不能为空！\n\n"
end if
if Session("Admin_GetCode")="" then
 FoundErr=True
 ErrMsg=ErrMsg & "你登录时间过长，请重新返回登录页面进行登录。\n\n"
end if
if Safecode<>CStr(Session("Admin_GetCode")) then
 FoundErr=True
 ErrMsg=ErrMsg & "您输入的确认码和系统产生的不一致，请重新输入。\n\n"
end if
if FoundErr=True then
   Call LoginError(ErrMsg)
   Conn.close
   Set Conn=Nothing
else

apass=md5(apass)
dim sql,rs
sql="select a_name,a_pass,a_flag from admin where a_name='"&aname&"' and a_pass='"&apass&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,1
if rs.BOF and rs.EOF then
    ErrMsg="用户名或是密码错误！"
 Call LoginError(ErrMsg)
rs.close
set rs=Nothing
conn.close
set conn=Nothing
response.End
elseif Not(rs.BOF or rs.EOF) then
session("aname")=rs("a_name")
session("admin_flag")="into"
session("admin_sys")=rs("a_flag")
response.Redirect("useradmin.asp")
rs.close
set rs=Nothing
conn.close
set conn=Nothing
response.End
End if
end if

Sub LoginError(EMsg)
    response.write "" & Chr(13)
    Response.End
End Sub

 %>