bgColor=#ffffff border=1>

我设计的登陆系统要求同一个帐号登陆时候,如果密码输错三次,该帐号则被提示为非法用户,锁定帐号,我不会实现,请大家帮帮忙!谢谢!登陆处理页面如下 dim strSQL,strPress,i strPress = Request.Form("zh") strPress1 = Request.Form("mm") i=0 if strPress<>"" then Set conn = Server.CreateObject("ADODB.Connection") strconn="Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("yonghu.mdb") conn.open strconn strSQL = "SELECT * FROM yonghu" strSQL = strSQL & " WHERE id='"&Trim(strPress) & "'" Set rs = Server.CreateObject("ADODB.Recordset") rs.Open strSQL,conn if rs.EOF then response.write "<script>alert('没有此用户');window.navigate('main.htm');</script> " else if strPress1=rs("mima") then response.write "<script>alert('登陆成功');window.navigate('main.htm');</script> " else response.write "<script>alert('密码错误');window.navigate('main.htm');</script> " end if rs.Close conn.Close end if else response.write "<script>alert('用户名不能为空');window.navigate('main.htm');</script> " end if 上面的有缺陷，不能实现同一帐号密码出错三次即提示“你的密码出错三次”的功能，请大家帮忙修改，我新手，最好能给思路和代码，谢谢拉！

UID219577 帖子10 精华[url=http://bbs.bc-cn.net/digest.php?authorid=219577]0[/url] 积分10 阅读权限10 性别男 在线时间0 小时 注册时间2007-11-21 最后登录2007-11-22 [url=http://bbs.bc-cn.net/space.php?action=viewpro&uid=219577]查看详细资料[/url]

[url=http://bbs.bc-cn.net/post.php?action=edit&fid=231&tid=187636&pid=1110096&page=1&extra=page%3D1]编辑[/url] [url=http://bbs.bc-cn.net/post.php?action=reply&fid=231&tid=187636&repquote=1110096&extra=page%3D1&page=1]引用[/url] [url=http://bbs.bc-cn.net/magic.php?action=user&pid=1110096]使用道具[/url] [url=http://bbs.bc-cn.net/misc.php?action=report&fid=231&tid=187636&pid=1110096&page=1]报告[/url] [url=http://bbs.bc-cn.net/thread-187636-1-1.html###]回复[/url] TOP

用一个session作为计数器,每次密码错误加1,如果达到三次,那么就自动跳转到处理的页面.

不过你这样做相当的不好,比如我想整谁,只要把他的用户名输入,然后随便弄3次密码,那他的用户名就被锁定了,这样他想要上也没法上了

一般来说,还是如果密码输错3次,禁止这个IP在一段时间内访问.同时还要用验证码,这样就能防止暴力破解了

dim strSQL,strPress,i
strPress = Request.Form("zh")
strPress1 = Request.Form("mm")
i=0
if strPress<>"" then
IF Session("tryCount")="" Then Session("tryCount")=0

Set conn = Server.CreateObject("ADODB.Connection")
strconn="Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("yonghu.mdb")
conn.open strconn

strSQL = "SELECT * FROM yonghu"
strSQL = strSQL & " WHERE id='"&Trim(strPress) & "'"
Set rs = Server.CreateObject("ADODB.Recordset")
rs.Open strSQL,conn

if rs.EOF then
response.write "<script>alert('没有此用户');window.navigate('main.htm');</script> "
else
if strPress1=rs("mima") then
response.write "<script>alert('登陆成功');window.navigate('main.htm');</script> "
else
  
  IF Session("tryCount")<>3"Then
      response.write "<script>alert('密码错误');window.navigate('main.htm');</script> "
       Session("tryCount")=Session("tryCount")+1
  Else
         response.write "<script>alert('密码已经3次错误了');window.navigate('main.htm');</script> "
  End IF
end if
rs.Close
conn.Close
end if
else
response.write "<script>alert('用户名不能为空');window.navigate('main.htm');</script> "

end if

dim strSQL,strPress,i

    strPress = Request.Form("zh")
    strPress1 = Request.Form("mm")
    i=0

    if isempty(session("times")) then
    session("times")=0
    else
    if session("times")<=3 then
        session("times")=session("times")+1
    
    if strPress<>"" then
    
    
    Set conn = Server.CreateObject("ADODB.Connection")
    strconn="Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("yonghu.mdb")
    conn.open strconn
    
    strSQL = "SELECT * FROM yonghu"
    strSQL = strSQL & " WHERE id='"&Trim(strPress) & "'"
    Set rs = Server.CreateObject("ADODB.Recordset")
    rs.Open strSQL,conn
    
      if rs.EOF then
        response.write "<script>alert('没有此用户');window.navigate('index.html');</script> "
      else
          if strPress1=rs("mima") then
           response.write "<script>alert('登陆成功');window.navigate('index.html');</script> "
          else
           response.write "<script>alert('密码错误');window.navigate('index.html');</script> "
          end if
    rs.Close
    conn.Close
      end if
    else
        response.write "<script>alert('用户名不能为空');window.navigate('index.html');</script> "
      
    end if

    else
        if DateDiff("s", Now, session("Start"))<=60     then
            Response.Write("<script>alert(""您的登录尝试超过三次，请两分钟后再登陆！"");location=""index.html""</script>")
            else
            if DateDiff("s", Now, session("Start"))>120     then
                session("times")=0
            end if
        end if
        session("Start")=now()'返回午夜 12 时以后已经过去的秒数
    end if
    end if


    

 
上面是我朋友帮我弄的也不行，所有帐号都被锁定了，哎真难弄

先谢谢了

三楼的代码，可以正常运行，谢谢了

这位朋友给帮忙修的代码，可以实现帐号的密码输错三次就提示“密码出错三次”的功能了，可是如果帐号a密码输错三次的话，再输入帐号b,只要b的密码出错一次，就提示“密码出错三次”，请再改改！

dim strSQL,strPress,i
strPress = Request.Form("zh")
strPress1 = Request.Form("mm")
i=0
if strPress<>"" then

Set conn = Server.CreateObject("ADODB.Connection")
strconn="Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("yonghu.mdb")
conn.open strconn

strSQL = "SELECT * FROM yonghu"
strSQL = strSQL & " WHERE id='"&Trim(strPress) & "'"
Set rs = Server.CreateObject("ADODB.Recordset")
rs.Open strSQL,conn

if rs.EOF then
response.write "<script>alert('没有此用户');window.navigate('main.htm');</script> "
else
if strPress1=rs("mima") then
response.write "<script>alert('登陆成功');window.navigate('main.htm');</script> "
else
  IF Session("strPress")<>strPress Then
      Session("strPress")=strPress
       Session("tryCount")=0
  End IF
  IF Session("tryCount")<>3 Then
      response.write "<script>alert('密码错误');window.navigate('main.htm');</script> "
       Session("tryCount")=Session("tryCount")+1
  Else
         response.write "<script>alert('密码已经3次错误了');window.navigate('main.htm');</script> "
  End IF
end if
rs.Close
conn.Close
end if
else
response.write "<script>alert('用户名不能为空');window.navigate('main.htm');</script> "

end if
这样呢？