CREATE PROCEDURE Login @loginid varchar(20), @password varchar(50), @empid int output, @reason varchar(10) output AS SELECT ID FROM AllUsers WHERE (UserID = @loginid) if (@@RowCount<1) begin ----1 set @reason ='NoUser' set @empid=0 end------1 else begin ----2 SELECT ID FROM AllUsers WHERE (UserID = @loginid) AND (Password = @password ) if (@@RowCount<1) begin -----3 set @reason ='PassErr' set @empid=0 end-------3 else begin ------4 SELECT @empid=ID FROM AllUsers WHERE (UserID = @loginid) AND (Password = @password and AllowLogin=1) if (@@RowCount<1) begin ---------6 set @reason ='UnAllow' set @empid=0 end------------6 else begin -----7 set @reason ='OK' end ----------7 end -----4 end------2 RETURN
通过获取帐号和密码,到数据库中查询,看看存在否,
不存在则验证不通过,存在,就通过,
验证通过,
把用户的帐号保存到session里面,
跳转到下一页面
@loginid varchar(20),
@password varchar(50),
@empid int output,
@reason varchar(10) output
AS
SELECT ID FROM AllUsers WHERE (UserID = @loginid)
if (@@RowCount<1)
begin ----1
set @reason ='NoUser'
set @empid=0
end------1
else
begin ----2
SELECT ID FROM AllUsers
WHERE (UserID = @loginid) AND (Password = @password )
if (@@RowCount<1)
begin -----3
set @reason ='PassErr'
set @empid=0
end-------3
else
begin ------4
SELECT @empid=ID
FROM AllUsers
WHERE (UserID = @loginid) AND (Password = @password and AllowLogin=1)
if (@@RowCount<1)
begin ---------6
set @reason ='UnAllow'
set @empid=0
end------------6
else
begin -----7
set @reason ='OK'
end ----------7
end -----4
end------2
RETURN