<!--#include file="cfg.asp"-->
<!--#include file="word_pass.asp"-->
<%
  user_name=word_pass(request.form("user_name"))
  user_passwd=word_pass(request.form("user_passwd"))
   set rs=conn.execute("select * from user_info where user_name='"&user_name&"' and user_passwd='"&user_passwd&"'")
   if rs.eof then 
       response.redirect "msg.asp?msg=錯(cuò)誤的用戶代號或密碼!"
   else
       session("username")=user_name
       session("userlevel")=rs("user_level")
       response.redirect "index.asp"
   end if
   call db_close()
%>