security.asp

<%

bLoggedIn = (len(session("UserName")) > 0)

if bRequireLogin then

' 要求登錄.

   if Not bLoggedIn then   

     response.redirect "login.asp?comebackto=" & _

     request.servervariables("script_name") & "?" & _

      ' 如果沒注冊,請注冊.

     server.urlencode(request.querystring)

   end if

end if

%> 

login.asp

<%

if request("comebackto") <> "" then

   sReferer = request("comebackto")

   sGoBackTo = "?" & request.querystring

end if

if request("cmdLogin") <> "" then

   sUserName = request("txtUserName")

   sPassword = request("txtPassword")

   ' 提交注冊.

   if sUserName = "bill" And sPassword = "gates" then

     bLoginSuccessful = True

     ' 驗證帳號和密碼.

   end if

   session("UserName") = sUserName

   if sReferer = "" then

     response.redirect "index.asp"

     ' 登錄成功,到用戶請求頁.

   else

     response.redirect sReferer

     ' 如果沒填寫,重定向到登錄頁或其他約定的頁.

end if

else

%>

   <form action="login.asp<%=sGoBackTo%>" method="post">

     <input type="text" name="txtUserName"><br>

     <input type="password" name="txtPassword"><br>

     <input type="submit" name="cmdLogin"><br>

   </form>

    ' 顯示登錄.

<%

end if

%>

testpage.asp

<%

   bRequireLogin = True

%>

<!--#include file="security.asp"-->

' 將 bRequireLogin設為真,放到 security.asp 中.

[1]