session与COOKIE

[zy8870195]

<!--#include file="conn/conn.asp"-->
<!--#include file="inc/md5.asp"-->
<%

dim rs
dim nick
dim password
nick=replace(trim(request("nick")),"'","")
password=md5(replace(trim(Request("password")),"'",""))
set rs=server.createobject("adodb.recordset")
sql="select * from personnal where pass='"&password&"' and [user]='"&nick&"'"
' response.write ""&sql&""
' response.end
rs.open sql,conn,1,1
if not(rs.bof and rs.eof) then
if password=rs("pass") and rs("flag")>=1 then
session("admin")=rs("user")
session("flag")=rs("flag")
Response.Redirect "managemain.asp"
else
call Error
end if
else
call Error()
end if

sub Error()
response.write " <br><br><br>"
response.write " <table align='center' width='300' border='1' cellpadding='0' cellspacing='0' bordercolor='#999999'>"
response.write " <tr bgcolor='#999999'> "
response.write " <td colspan='2' height='15'> "
response.write " <div align='center'><font color='#FFFFFF'>操作: 确认身份失败!</font></div>"
response.write " </td>"
response.write " </tr>"
response.write " <tr> "
response.write " <td colspan='2' height='23'> "
response.write " <div align='center'><br><br>"
response.write " 用户名或密码错误!!! <br><br>"
response.write " <a href='javascript:onclick=history.go(-1)'>返回</a>"
response.write " <br><br></div></td>"
response.write " </tr> </table>"
end sub
rs.close
conn.close
set rs=nothing
set conn=nothing

%>

session怎么设置都不能设置超时时间
请问要怎么改成COOKIE啊

每个页面是用
<%@language=vbscript%>
<%
if session("admin")="" then
response.redirect "../index.asp"
else
if session("flag")>1 then
response.write "<br><p align=center>您没有操作的权限</p>"
response.end
end if
end if
%>判断是否登陆 都要怎么改啊

[jacklau88]

[Quote=引用 1 楼 myllop 的回复:]
把
session("admin")=rs("user")
session("flag")=rs("flag")
Response.Redirect "managemain.asp"

改成
response.cookies("admin")=rs("user")
response.cookies("flag")=rs("flag")

取cookies的时候用
request.cookies("admin")
[/Quote]

Session是可以设置超时时间的，如果要改成cookie的话，楼上就是正解。

[zy8870195]

<%
if request.cookies("admin") ="" then
response.redirect "../index.asp"
end if
%>

提示对象不支持属性 这样错了吗

[cestar2005]

[Quote=引用 1 楼 myllop 的回复:]
把
session("admin")=rs("user")
session("flag")=rs("flag")
Response.Redirect "managemain.asp"

改成
response.cookies("admin")=rs("user")
response.cookies("flag")=rs("flag")

取cookies的时候用
request.cookies("admin")
[/Quote]

Response.Cookies("CookieName").Expires=DateAdd("h", 1, Now()) //设置有效时间为1小时
如要清空
Response.Cookies("CookieName")=""
OR
Response.Cookies("CookieName").Expires=0

[zy8870195]

请问登陆我使用了COOKIES
session("flag")=rs("flag")这个是登陆后得到的权限 改成
response.cookies("flag")=rs("flag")以后
我还能在页面用
<%
if session("admin")="" then
response.redirect "../index.asp"
else
if session("flag")>1 then
response.write " <br> <p align=center>您没有操作的权限 </p>"
response.end
end if
end if
%>

可以吗