main.htm
html>
body>
form action="login.asp" method="Post">
input type="text" name="username" size="20"> 賬號br>
input type="password" name="password" size="20"> 密碼br>
input type="submit" value="進入">
/form>
/body>/html>
login.asp
%@Language=VBScript%>
%Response.Buffer = True%>
html>
body>
%
UserName = Request.Form("username")
Password = Request.Form("password")
Set MyConn=Server.CreateObject("ADODB.Connection")
MyConn.Open "Provider={Microsoft Access Driver (*.mdb)};
DBQ=D:\suifengqiwu\databases\test.mdb"
SQL = "Select * From tblLogin"
Set RS = MyConn.Execute(SQL)
If UserName = RS("UserName") And Password = RS("Password") Then
Session("allow") = True
!-----連接保護的頁面------->
Else
Response.Redirect "main.asp"
RS.Close
MyConn.Close
Set RS = Nothing
Set MyConn = Nothing
End If
%>
/body>/html>
做好了上面兩個程序，再完善一下外圍：把global.asa中的Session_Onstart加上 Session("allow") = False 語句，再在要保護的網頁中加入下面的語句：
% @Language=VBScript %>
% Response.Buffer = True %>
% If session("allow") = False Then Response.Redirect "main.asp" %>
[1]
