security.asp

%

bLoggedIn = (len(session("UserName")) > 0)

if bRequireLogin then

' 要求登录.

   if Not bLoggedIn then   

     response.redirect "login.asp?comebackto=" _

     request.servervariables("script_name") "?" _

      ' 如果没注册,请注册.

     server.urlencode(request.querystring)

   end if

end if

%> 

login.asp

%

if request("comebackto") > "" then

   sReferer = request("comebackto")

   sGoBackTo = "?" request.querystring

end if

if request("cmdLogin") > "" then

   sUserName = request("txtUserName")

   sPassword = request("txtPassword")

   ' 提交注册.

   if sUserName = "bill" And sPassword = "gates" then

     bLoginSuccessful = True

     ' 验证帐号和密码.

   end if

   session("UserName") = sUserName

   if sReferer = "" then

     response.redirect "index.asp"

     ' 登录成功,到用户请求页.

   else

     response.redirect sReferer

     ' 如果没填写,重定向到登录页或其他约定的页.

end if

else

%>

   form action="login.asp%=sGoBackTo%>" method="post">

     input type="text" name="txtUserName">br>

     input type="password" name="txtPassword">br>

     input type="submit" name="cmdLogin">br>

   /form>

    ' 显示登录.

%

end if

%>

testpage.asp

%

   bRequireLogin = True

%>

!--#include file="security.asp"-->

' 将 bRequireLogin设为真,放到 security.asp 中.

[1]