security.asp
<%
bLoggedIn = (len(session(\”UserName\”)) > 0)
if bRequireLogin then
\’ 要求登录.
if Not bLoggedIn then
response.redirect \”login.asp?comebackto=\” & _
request.servervariables(\”script_name\”) & \”?\” & _
\’ 如果没注册,请注册.
server.urlencode(request.querystring)
end if
end if
%>
login.asp
<%
if request(\”comebackto\”) <> \”\” then
sReferer = request(\”comebackto\”)
sGoBackTo = \”?\” & request.querystring
end if
if request(\”cmdLogin\”) <> \”\” then
sUserName = request(\”txtUserName\”)
sPassword = request(\”txtPassword\”)
\’ 提交注册.
if sUserName = \”bill\” And sPassword = \”gates\” then
bLoginSuccessful = True
\’ 验证帐号和密码.
end if
session(\”UserName\”) = sUserName
if sReferer = \”\” then
response.redirect \”index.asp\”
\’ 登录成功,到用户请求页.
else
response.redirect sReferer
\’ 如果没填写,重定向到登录页或其他约定的页.
end if
else
%>
<form action=\”login.asp<%=sGoBackTo%>\” method=\”post\”>
<input type=\”text\” name=\”txtUserName\”><br>
<input type=\”password\” name=\”txtPassword\”><br>
<input type=\”submit\” name=\”cmdLogin\”><br>
</form>
\’ 显示登录.
<%
end if
%>
testpage.asp
<%
bRequireLogin = True
%>
<!–#include file=\”security.asp\”–>
\’ 将 bRequireLogin设为真,放到 security.asp 中.
[1]
