asp简单用户登陆代码

if cstr(request("code"))cstr(session("getcode")) then
response.write""
response.end
end if
dim userid,password
username=request("username")
password=md5(request("password"))
set rs=server.CreateObject("adodb.recordset")
sql="select username,vip,jifen1,lastlogin,thislogin,logins from tgy where username='"&username&"'and password='"&password&"'"
rs.open sql,conn,3,3
if rs.eof then
response.Write ""
else
session("username")=rs("username")
if day(rs("lastlogin"))day(date()) then
if rs("jifen1")="" or isnull(rs("jifen1")) then
rs("jifen1")=5
else
rs("jifen1")=rs("jifen1")+5
end if
end if
rs("lastlogin")=rs("thislogin")
rs("thislogin")=now()
rs("logins")=rs("logins")+1
rs.update
session.timeout=20
response.Write ""
end if
rs.close
set rs=nothing
conn.close
set conn=nothing
%>