<!--#include file="conn.asp"-->
<!--#include file="../md5.asp"-->
<%
admin=replace(trim(request("user")),"'","")
pass=replace(trim(request("pass")),"'","")

set rs=server.createobject("adodb.recordset")
sql="select * from admin where admname='"&admin&"'"
rs.open sql,conn,3,3
    if rs.eof then
        response.write "<script LANGUAGE='javascript'>alert('對不起，登陸失敗！');window.location.reload('javascript:history.go(-1)')</script>"
    else
	   pass1=rs("admpass")
	   if pass1=md5(pass) then
        session("admin")=rs("admname")
        response.redirect "main.asp"
		else
		response.write "<script LANGUAGE='javascript'>alert('對不起，登陸失?。?#039;);window.location.reload('javascript:history.go(-1)')</script>"
		end if
    end if
rs.close
set rs=nothing
conn.close
set conn=nothing
%>