security.asp
<%
bLoggedIn = (len(session("UserName")) > 0)
if bRequireLogin then
' 要求登錄.
if Not bLoggedIn then
response.redirect "login.asp?comebackto=" & _
request.servervariables("script_name") & "?" & _
' 如果沒注冊,請注冊.
server.urlencode(request.querystring)
end if
end if
%>
login.asp
<%
if request("comebackto") <> "" then
sReferer = request("comebackto")
sGoBackTo = "?" & request.querystring
end if
if request("cmdLogin") <> "" then
sUserName = request("txtUserName")
sPassword = request("txtPassword")
' 提交注冊.
if sUserName = "bill" And sPassword = "gates" then
bLoginSuccessful = True
' 驗證帳號和密碼.
end if
session("UserName") = sUserName
if sReferer = "" then
response.redirect "index.asp"
' 登錄成功,到用戶請求頁.
else
response.redirect sReferer
' 如果沒填寫,重定向到登錄頁或其他約定的頁.
end if
else
%>
<form action="login.asp<%=sGoBackTo%>" method="post">
<input type="text" name="txtUserName"><br>
<input type="password" name="txtPassword"><br>
<input type="submit" name="cmdLogin"><br>
</form>
' 顯示登錄.
<%
end if
%>
testpage.asp
<%
bRequireLogin = True
%>
<!--#include file="security.asp"-->
' 將 bRequireLogin設為真,放到 security.asp 中.
[1]
