<%
  dim conn,connstr,database

  database=0         '设置使用的数据库类型,1=SQL SERVER,其他为ACCESS

  if database=1 then
      connstr="driver={SQL Server};server=(local);database=BVNews;uid=sa;pwd=1;"
  else
      connstr="DBQ="+server.mappath("bywydata.mdb")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};"
  end if

  set conn=server.CreateObject("adodb.connection")
  conn.open connstr
%>

<%
  if request("username")<>"" and request("userpassword")<>"" then 
      dim name
      dim pwd
	  dim sql
	  dim rs
	  name=request.form("username")
	  pwd=request.form("userpassword")
	  set rs = server.createobject("adodb.recordset")
	  sql="select * from users where name='" & name & "' and pwd='" & pwd & "'"
      rs.open sql,conn,1,1
	  if err.number <> 0 then
	      response.write "数据库操作失败："&err.description
		  response.end
	  else
		  if not rs.eof and not rs.bof then
	          session("purview")=rs("purview")
			  session("name")=rs("name")
			  response.redirect "index.asp?id=2"
          end if
	  end if
	  rs.close
  end if
%><br><br><br><br>
<form action="index.asp" method=post>
<table width="40%" border="0" cellspacing="5" cellpadding="6" align="center">
  <tr> 
    <td>
        <div align="center"><font size="2"><b>用户账号:</b></font> 
          <input type="text" name="username" class="input" size="18" maxlength="16" onMouseOver=this.focus()>
        </div>
      </td>
  </tr>
  <tr> 
    <td>
        <div align="center"><font size="2"><b>登陆密码:</b></font> 
          <input type="password" name="userpassword" class="input" size="18" maxlength="14" onMouseOver=this.focus()>
        </div>
      </td>
  </tr>
  <tr> 
    <td>
        <div align="center"><INPUT style="BORDER-RIGHT: 1px double; BORDER-TOP: 1px double; FONT-SIZE: 9pt; BORDER-LEFT: 1px double; COLOR: #666666; BORDER-BOTTOM: 1px double; BACKGROUND-COLOR: #cccccc" type=submit value=登　陆 name=btnG class="button"></div>
      </td>
  </tr>
</table>
</form>