Question

asp网站后台登陆总是提示验证码错误，明明是正确的，下面我把代码发出来，希望高手指点下，删除验证码也好

<!--#include file="inc/conn.asp"-->
<!--#include file="inc/md5.asp"-->
<!--#include file="inc/admin_transmission.asp"-->
<%
dim username,password,checkcode
username=request.Form("username")
username = userif(username)
password=request.Form("password")
password = userif(password)
password=md5(replace(trim(Request("password")),"'",""),32)
checkcode=replace(trim(Request("checkcode")),"'","")
'response.Write username
if checkcode = Session("GetCode") then
set rs=server.createobject("adodb.recordset")
sql="select [user],[pwd] from [admin] where[user]='"&username&"' and [pwd]='"&password&"'"
rs.open sql,conn,1,1
if rs.eof then
%>
<script>alert('用户名密码不正确');
location.href='login.asp'
</script>
<%
else
session("user")=username
session("pwd")=password
response.Redirect("admin_index.asp")
end if
else
response.write("<script>alert('验证码输入错误!!!');history.go(-1)</script>")
end if
%>
<script language=javascript>
function SetFocus()
{
if (document.Login.UserName.value=="")
document.Login.UserName.focus();
else
document.Login.UserName.select();
}
function CheckForm()
{
if(document.Login.UserName.value=="")
{
alert("请输入用户名！");
document.Login.UserName.focus();
return false;
}
if(document.Login.Password.value == "")
{
alert("请输入密码！");
document.Login.Password.focus();
return false;
}
if(document.Login.checkcode.value == "")
{
alert("请输入验证码！");
document.Login.checkcode.focus();
return false;
}
}
</script>

<tr>
<td align="right"><font color="#000000">验证码：</font></td>
<td> <input name="checkcode" type="text" size="8"onFocus="this.select(); " /><img src="inc/code.asp" border="0" style="cursor : pointer;" onClick="this.src='inc/code.asp'" /></td>
</tr>

Answer 1

这样吧，我直接教你删除验证码吧。
<!--#include file="inc/conn.asp"-->
<!--#include file="inc/md5.asp"-->
<!--#include file="inc/admin_transmission.asp"-->
<%
dim username,password
username=request.Form("username")
username = userif(username)
password=request.Form("password")
password = userif(password)
password=md5(replace(trim(Request("password")),"'",""),32)
set rs=server.createobject("adodb.recordset")
sql="select [user],[pwd] from [admin] where[user]='"&username&"' and [pwd]='"&password&"'"
rs.open sql,conn,1,1
if rs.eof then
%>
<script>alert('用户名密码不正确');
location.href='login.asp'
</script>
<%
else
session("user")=username
session("pwd")=password
response.Redirect("admin_index.asp")
end if
%>

<script language=javascript>
function SetFocus()
{
if (document.Login.UserName.value=="")
document.Login.UserName.focus();
else
document.Login.UserName.select();
}
function CheckForm()
{
if(document.Login.UserName.value=="")
{
alert("请输入用户名！");
document.Login.UserName.focus();
return false;
}
if(document.Login.Password.value == "")
{
alert("请输入密码！");
document.Login.Password.focus();
return false;
}
}
</script>

追问

我这改过了，还是不行 提示：您无权访问该页或登录时间过长，是不是还有哪里没有改？

追答

关于验证码验证的代码全都清除了，再不行就不是验证码的问题了。

Answer 2

<!--#include file="inc/conn.asp"-->
<!--#include file="inc/md5.asp"-->
<!--#include file="inc/admin_transmission.asp"-->
<%
dim username,password
username=request.Form("username")
username = userif(username)
password=request.Form("password")
password = userif(password)
password=md5(replace(trim(Request("password")),"'",""),32)

'response.Write username

set rs=server.createobject("adodb.recordset")
sql="select [user],[pwd] from [admin] where[user]='"&username&"' and [pwd]='"&password&"'"
rs.open sql,conn,1,1
if rs.eof then
%>
<script>alert('用户名密码不正确');
location.href='login.asp'
</script>
<%
else
session("user")=username
session("pwd")=password
response.Redirect("admin_index.asp")
end if

%>
问题补充：
<script language=javascript>
function SetFocus()
{
if (document.Login.UserName.value=="")
document.Login.UserName.focus();
else
document.Login.UserName.select();
}
function CheckForm()
{
if(document.Login.UserName.value=="")
{
alert("请输入用户名！");
document.Login.UserName.focus();
return false;
}
if(document.Login.Password.value == "")
{
alert("请输入密码！");
document.Login.Password.focus();
return false;
}

}
</script>

Answer 3

看下 session被禁用没有