您当前的位置: <%
if isempty(session("passed"))then
session("passed")<>true
end if
if session("passed")<>true then
username=request.form("username")
pwd=request.form("pwd")
if username="" and pwd=""then
errmsg="请输入用户名和密码"
else
dim conn
set conn=server.createobject("adodb.connection")
conn.connectionstring="driver={sql server};server=127.0.0.1;uid=sa;pwd=sa;database=tbAddress"
conn.open
set rs=server.createobject("adodb.recordset")
set rs.activeconnection=conn
rs.cursortype=3
rs.open"select * from admin where username='" & trim(username) & "' and pwd=' "&trim(pwd)&" '"
if rs.eof then
response.Write"<script language=javascript>alert('不存在此用户');history.back(-1);</script>"
response.End()
else
if pwd <> rs.fields("pwd")then
session("errmsg")="密码不正确"
else
errmsg=""
session("passed")=true
session("username")=rs.fields("username")
session("pwd")=rs.fields("pwd")
session("errmsg")=""
response.Redirect"index.asp"
end if
end if
end if
end if
if session("passed")<>true then
%>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>无标题文档</title>
</head>
<body>
<script language="javascript">
function check()
{if (document.form1.username.value==""||document.form1.pwd.value=="")
{window.alert("请输入用户名或密码")
return false}
return true
}
</script>
<p align="center"><font size="5" face="华文行楷">用户登录</font></p>
<form method="post"name="form1"action="<%=request.ServerVariables("path_info")%>"onsubmit="return check()">
<p align="center"><font face="宋体">用户名:
<input type="text"name="username"size="20"></p>
<p align="center">密 码:
<input type="password"name="pwd"size="20"></p>
<p align="center"><input type="submit"value="提交" name="b1"><input type="reset"value="重置"name="b2"></p>
</form>
<%
response.End()
end if
%>
</body>
</html>
------解决方案--------------------
rs.open"select * from admin where username='" & trim(username) & "' and pwd='"&trim(pwd)&"'"
pwd那里不要有空格