ASP连接ACCESS数据库来验证登陆

来源:百度知道 编辑:UC知道 时间:2024/05/12 06:48:41
我的代码是

<%@language="Vbscript"%>
<%
Set Conn=Server.CreateObject("ADODB.Connection")
ConnStr="provider=Microsoft Access Driver (*.mdb)};dbq="&Server.MapPath("article.mdb")
Conn.Open ConnStr
%>
<%
if request.Form("username")="" then
response.Write"<script language=javascript>alert('请输入用户名');history.back(-1);</script>"
response.End()
end if
if request.Form("password")="" then
response.Write"<script language=javascript>alert('请输入密码');history.back(-1);</script>"
response.End()
end if
username=trim(request.Form("username"))
password=trim(request.Form("password"))
sql="select * from user where user_name='"&username&"' and user_pwd='"&password&"'"

set rs=ser

请告知报什么错.另外帮你改进一下!防止恶意登录!(建议还可以加入验证码)
<%
username=trim(request.Form("username"))
password=trim(request.Form("password")) '这句放在最上面,这样,取得username和password的值时,只需要运行一次!
username=replace(username,"'","")
password=replace(password,"'","") '替换掉来自表单数据中的'号,防止恶意登录!
if username="" then
response.Write"<script>alert('请输入用户名');history.back();</script>"
response.End()
end if
if password="" then
response.Write"<script>alert('请输入密码');history.back();</script>"
response.End()
end if
set rs=server.CreateObject("adodb.recordset")
sql="select * from user where user_name='"&username&"'"
rs.open sql,conn,1,1
if rs.bof and rs.eof then
response.write "<script>alert('用户不存在!请确认是否注册!');history.ba