CODE:
[Copy to clipboard]
<!--#include file="inc/inc.asp"-->
<!--#include file="admin/inc/md5.asp"-->
<%
dim rs,sql,username,password,ReturnUrl
username    = LCase(Replace(Trim(request("username")),"'",""))
password    = Replace(Trim(request("password")),"'","")
password    = MD5(password & "iloveyouhao0765")
ReturnUrl    = Trim(request("ReturnUrl"))

set rs      = Server.CreateObject("Adodb.recordset")
sql        = "select username,password,isVIP,lastLoginTime,lastLoginIP from BT_User where username='" & username & "'and password='" & password &"'"
rs.open sql,conn,1,3
If Not(rs.bof and rs.eof) Then
  If password = rs("password") Then
    session("username")  = rs("username")
    rs("lastLoginTime") = Now()
    rs("lastLoginIP")  = Userip()
    rs.update
    If rs("isVIP") = "VIP会员" Then
      session("isVIP") = True
    End If
    If Trim(request.cookies("p_Count")) = "" Then response.cookies("p_Count") = 0
    If ReturnUrl ="" Then  '登陆后返回URL
      Response.Redirect "eshop.asp"
    ElseIf ReturnUrl <> "" Then
      response.Redirect ReturnUrl
    End If
  End If
End If
rs.close
Set rs      = Nothing
Call closeConnection()