<!--#include file="conn.inc"-->
<%
UserID=Request("UserID")
password=Request.Form("Password")
function loginNow()
       sql="select * from manage where UserID='"&request("UserID")&"'"
      set rs=server.createobject("ADODB.Recordset")
      rs.open sql,conn,1,1
 
if not rs.eof then
   if Trim(password)=Trim(rs("Password")) then
         session("ISlogin")=1
         session("UserID")=UserID
         loginNow=1
         exit function
     else
         loginNow=0
         exit function
   end if
   else
   loginNow=-1  
end if
end function


 dim isuser
 dim location
 isuser=loginNow()
 
 
 if isuser=1 then
    response.redirect"manage_person.asp"
 elseif isuser=0 then
          response.redirect"../khxx/error.asp?id=9"
 else
         response.redirect "../khxx/error.asp?id=18"
 
 end if
%>