<!-- #include file="conn.asp" -->
<!-- #include file="md5.asp" -->
<%
  dim name
  dim pass
  dim sercuity
	name=replace(trim(Request("name")),"'","‘") 
	pass=MD5(replace(trim(Request("pass")),"'","‘"))    
	secruity=replace(trim(Request("secruity")),"'","‘") 
	checksecruity=replace(trim(Request("checksecruity")),"'","‘") 

	Set rs=Server.Createobject("adodb.recordset") 
	sql="select * from admin where pass='"&pass&"' AND name='"&name&"'" 
	rs.open sql,conn,1,1 
	If NOT(rs.bof AND rs.eof) AND secruity=checksecruity Then  
                        response.cookies("name")=true
                        response.redirect "admin_main.asp"
	Else
		  response.redirect "error.asp?err_on=10"
	End If 
 
	rs.close     
Set rs=nothing 
conn.close 
Set conn=nothing 
%>