我有一段ASP登录页面代码,有错误,请帮忙修正

来源:百度知道 编辑:UC知道 时间:2024/06/04 05:39:26
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>无标题文档</title>
</head>

<body>
<%
dim userid,password,db,sqlstr
userid=request.Form("userid")
password=request.Form("password")
sqlstr="select * from user where userid='"&userid&"' and password='"&password&"'"

set db=Server.CreateObject("ADODB.Connection")
db.ConnectionString="provider=Microsoft.jet.oledb.4.0;data source="&server.Mappath("db.mdb")

db.open
set rs=Server.CreateObject("ADODB.Recordset")

response.Write sqlstr
set rs=db.execute(sqlstr)

if rs.eof then
response.write ("<script language=javascript >alert('用户名或密码错误');history.go(-1)</script>")
else
session(&quo

set rs=Server.CreateObject("ADODB.Recordset") '这句代码不要,因为你下面用了set rs=db.execute(sqlstr)

response.Write sqlstr
set rs=db.execute(sqlstr)

还有
sqlstr="select * from user where userid='"&userid&"' and password='"&password&"'"
改为
sqlstr="select * from [user] where userid='"&userid&"' and [password]='"&password&"'"