security.asp

<%

bLoggedIn = (len(session("UserName")) > 0)

if bRequireLogin then

' 要求登录.

   if Not bLoggedIn then   

     response.redirect "login.asp?comebackto=" & _

     request.servervariables("script_name") & "?" & _

      ' 如果没注册,请注册.

     server.urlencode(request.querystring)

   end if

end if

%> 

login.asp

<%

if request("comebackto") <> "" then

   sReferer = request("comebackto")

   sGoBackTo = "?" & request.querystring

end if

if request("cmdLogin") <> "" then

   sUserName = request("txtUserName")

   sPassword = request("txtPassword")

   ' 提交注册.

   if sUserName = "bill" And sPassword = "gates" then

     bLoginSuccessful = True

     ' 验证帐号和密码.

   end if

   session("UserName") = sUserName

   if sReferer = "" then

     response.redirect "index.asp"

     ' 登录成功,到用户请求页.

   else

     response.redirect sReferer

     ' 如果没填写,重定向到登录页或其他约定的页.

end if

else

%>

   <form action="login.asp<%=sGoBackTo%>" method="post">

     <input type="text" name="txtUserName"><br>

     <input type="password" name="txtPassword"><br>

     <input type="submit" name="cmdLogin"><br>

   </form>

    ' 显示登录.

<%

end if

%>

testpage.asp

<%

   bRequireLogin = True

%>

<!--#include file="security.asp"-->

' 将 bRequireLogin设为真,放到 security.asp 中.

[1]