<!--#include file="conn.asp"-->
<%
UserName=trim(request("UserName"))
PassWord=trim(request("PassWord"))
if username="" and password="" then
response.write"<script>alert('參數錯誤');location.href='javascript:history.back()'</script>"
response.end
end if
set rs=server.CreateObject("adodb.recordset")
sql="select admin,pass from admin where admin="&username
rs.open sql,conn,1,1
if rs.eof then
response.write "<script>alert('用戶名密碼錯誤');location.href='javascript:history.back()'</script>"
response.end
end if
if password<>rs("pass") then
response.write "<script>alert('用戶名密碼錯誤');location.href='javascript:history.back()'</script>"
response.end
end if
session("bxgzsadmin")=username
session("bxgzspass")=password
response.redirect "index.asp"
       
%>