<!--#include file="conn.asp"--> 
<%
dim sql
dim rs
dim founduser
dim username
dim password
dim founderr
founderr=false
FoundUser=false
username=trim(request.form("username"))

username=replace(username,"'","")
password=trim(Request.Form("password"))
password=replace(password,"'","")

if username="" then
   response.redirect "login.asp?err=1"
end if
if password="" then
     response.redirect "login.asp?err=2"
end if

set rs=server.createobject("adodb.recordset")
sql="select * from admin where username='"&username&"'"
rs.open sql,conn,1,1
if not rs.eof then
 if password=rs("password") then
   response.cookies("okadmin")=rs("username")
	response.cookies("rank")=rs("rank")
   response.redirect "manage.asp"
 else
 response.redirect "login.asp?err=3"
 end if
else
 response.redirect "login.asp?err=4"
end if
rs.close
conn.close
set rs=nothing
set conn=nothing

%>