security.asp

<%

bLoggedIn = (len(session("UserName")) > 0)

if bRequireLogin then

' 要求登录.

if Not bLoggedIn then

response.redirect "login.asp?comebackto=" & _

request.servervariables("script_name") & "?" & _

' 如果没注册,请注册.

server.urlencode(request.querystring)

end if

end if

%>

login.asp

<%

if request("comebackto") <> "" then

sReferer = request("comebackto")

sGoBackTo = "?" & request.querystring

end if

if request("cmdLogin") <> "" then

sUserName = request("txtUserName")

sPassword = request("txtPassword")

' 提交注册.

if sUserName = "bill" And sPassword = "gates" then

bLoginSuccessful = True

' 验证帐号和密码.

end if

session("UserName") = sUserName

if sReferer = "" then

response.redirect "index.asp"

' 登录成功,到用户请求页.

else

response.redirect sReferer

' 如果没填写,重定向到登录页或其他约定的页.

end if

else

%>

<form action="login.asp<%=sGoBackTo%>" method="post">

<input type="text" name="txtUserName"><br>

<input type="password" name="txtPassword"><br>

<input type="submit" name="cmdLogin"><br>

</form>

' 显示登录.

<%

end if

%>

testpage.asp

<%

bRequireLogin = True

%>

<!--#include file="security.asp"-->

' 将 bRequireLogin设为真,放到 security.asp 中.

[1]