<%
username=session("username")
password=session("userpassword")
set rs1=server.createobject("adodb.recordset")
sql="select * from shop_user where username='" &username& "'  "
 rs1.open sql,conn,1,1
if  rs1.eof then
response.write"<script language='javascript'>alert('用戶名密碼錯誤！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if
if password<>rs1("userpassword") then
response.write"<script language='javascript'>alert('用戶名密碼錯誤！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end
end if

 if int(rs1("manbid"))<>20000 then
response.write"<script language='javascript'>alert('你不是論壇管理員！')</script>"
response.write "<script language='javascript'>history.back(-1)</script>"
response.end 
end if
%>