<!-- #include file="conn.asp" -->
<%
if Request("uid")="" then
%>
	<script language=Javascript>
	alert("用戶名不能為空！");
	window.history.go(-1);	
	</script>
<%
response.End
end if
dim sql
'dim rs
dim uid
'dim pwd
	
uid=replace(trim(request("uid")),"'","")
pwd=replace(trim(Request("pwd")),"'","")

sql="select * from puser where uid='"&uid&"' and pwd='"&pwd&"'"
set rs = conn.Execute(sql)
if not (rs.eof or err) then
		session("uid")=rs("uid")
		 session("VIP")=rs("VIP")
		   session("uname")=rs("uname")
response.Redirect"index.asp"
else
%>
	<script language=Javascript>
	alert("用戶名或密碼錯(cuò)誤，請重新輸入！");
	window.history.go(-1);	
	</script>
<%	
	end if
%>