ip限制

<%
   dim userip,LoginTime

   LoginTime=now()

 if Request("action")="Save" then
userName = Request("userName")
userPass = Request("userPass")
userip =  Request.ServerVariables("REMOTE_ADDR")
Set rsss=Server.CreateObject("Adodb.RecordSet")
sql = "select * from users where num = '"&userName&"' and [password] = '"&userPass&"'"
rsss.open sql,Conn,1,1
if not(rsss.bof and rsss.eof) then
  ckbox=Request("ckbox")
  B=split(ckbox,",")
  if ValidCode("CSName",Request.Form("codeKey"),Request.Form("code")) then
      UserIP=GetUserIP()
   Set Rsas=Server.CreateObject("Adodb.RecordSet")
   Sqlas = "Select * From UserIP where num='"&userName&"'"
   Rsas.Open Sqlas,Conn,1,1
  
     if not (Rsas.Eof or Rsas.Bof) then
   twscript("你已参加过投票")
   
   
   
   
   
   else
   if ValidCode("CSName",Request.Form("codeKey"),Request.Form("code")) then
      UserIP=GetUserIP()
   
    Set bbb=Server.CreateObject("Adodb.RecordSet")
      aaa = "Select * From UserIP where UserIP='"&userip&"'"
   bbb.Open aaa,Conn,1,1
  
      if not (bbb.Eof or bbb.Bof) then
    if DateDiff("h",PostTime,now)>=4 then  
   twscript("您的ip在24小时内已投过票")
    else
      Set Rsip=Server.CreateObject("Adodb.RecordSet")
   Sqlip = "Select * From UserIP"
   Rsip.Open Sqlip,Conn,1,3
   Rsip.Addnew
   Rsip("num")=userName
   Rsip("PostTime")=now()
   Rsip("UserIP")=userip
   Rsip.Update
   Rsip.Close
   Set Rsip=Nothing
   end if
    end if
 end if
 
 
 

  
   end if
   Rsas.Close
   Set Rsas=Nothing
   
   Set Rsa=Server.CreateObject("Adodb.RecordSet")
   Sqla="Select * From NewsInfo"
   Rsa.Open Sqla,Conn,1,1
   do while not Rsa.Eof
   for i=lbound(B) to ubound(B)
   if cint(Rsa("ID"))=cint(B(i)) then
    Set Rs=Server.CreateObject("Adodb.RecordSet")
    Sql = "Select * From NewsInfo Where ID="&Rsa("ID")&""
    Rs.Open Sql,Conn,1,3
    Rs("Click")=Rs("Click")+1
    Rs.Update
    Rs.Close
    Set Rs=Nothing
   end if
   next
   Rsa.MoveNext
   Loop
   Rsa.Close
   Set Rsa=Nothing
  else
   Response.Write("<script>alert('输入的验证码错误!'); history.go(-1);</script>")
   Response.end()
  end if
  Response.Write("<script>alert('评选成功');top.window.location.href='result.asp';</script>")
else
Response.Write("<script>alert('此学号不存在或者密码错误!'); history.go(-1);</script>")
  Response.end()
end if
rsss.close
set rsss = Nothing
 end if
%>