密码错误也可以登陆,很郁闷

建议你
if then
elseif then
else
end if

if rs("pawd_bhss") <> reg_name then

你还真人才呢。密码不等于用户名？

reg_name = trim(checkstr(request("reg_name")))
reg_word = trim(checkstr(request("reg_word")))
qq="select * from user_bhss where user_bhss = '"&reg_name&"'"
set rs = conn.execute(qq)
if  rs.eof then
    response.write"<script>alert('对不起,没有此用户名');history.back();</script>"
    response.end
else
    if rs("pawd_bhss") <> reg_word then  '这是判断密码的
        response.write"<script>alert('密码错误');history.back();</script>"
        response.end
    end if
end if

session("bhss_reguser") = rs("user_bhss")
session("bhss_FifID") = rs("ID")
session.Timeout = 10
response.redirect"../Style/"

[ 本帖最后由 孤独冷雨 于 2009-12-22 10:15 编辑 ]