%
postion = Trim(Request.QueryString("postion"))
if postion="" or not IsNumeric(postion) then
errmsg=""
postion=trim(1)
else
errmsg="您没有登陆或者停留的时间过长,请重新登陆!"
end if
Function checkenter()
If username<>"" and password<>"" and otherpwd<>"" and Instr(username,"'")<1 and Instr(username," ")<1 and Instr(username,"""")<1 and Instr(username,"&")<1 then
checkenter=TRUE
Else
checkenter=FALSE
End If
End Function
Function checksysUser()
sql="SELECT * FROM admin WHERE user='"&username&"'"
Set rs=Server.CreateObject("adodb.recordset")
rs.Open sql,conn,1,1
if rs.eof then
checksysUser=FALSE
else
passwd=trim(rs("pwd"))
if passwd=password then
Session("admin")=username
checksysUser=TRUE
else
checksysUser=FALSE
end if
End if
rs.close
conn.close
End Function
%>