这段验证代码哪里错,高手来看看!!!

来源:百度知道 编辑:UC知道 时间:2024/05/26 14:04:26
<%
if request.Form("user")="" then
response.Write"<script language=javascript>alert('请输入用户名');history.back(-1);</script>"
response.End
end if
if request.Form("pswd")="" then
response.Write"<script language=javascript>alert('请输入密码');history.back(-1);</script>"
response.End
end if
userName=trim(request.querystring("user"))
pswd=trim(request.querystring("pswd"))
dim conn,strconn
Set conn = Server.CreateObject("ADODB.Connection")
strconn = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & Server.MapPath("data/db.mdb")
conn.Open Strconn
dim rs,sql
Set rs=Server.CreateObject("ADODB.Recordset")
sql="select userName from tb_user where userName='"&user&"' and pswd ='"&pswd&"'"
rs.open sql

朋友你
if rs.eof and rs.bof then
这句话写的不对吧,着是在没找到对应记录的情况下你执行的是
response.write ("<script language=""javascript"">alert(""登录成功"");location.href(""00.asp"")</script>")
response.end

应该改成if not rs.eof and rs.bof then

userName=trim(request.form("user"))
pswd=trim(request.form("pswd"))