<%
dim sql
dim rs
dim founduser
dim username
dim password
dim founderr
founderr=false
FoundUser=false
username=trim(request.form("username"))
password=trim(Request.Form("password"))
if username="" then
   response.redirect "login.asp?err=1"
end if
if password="" then
     response.redirect "login.asp?err=2"
end if

dim conn   
dim connstr
connstr="DBQ="+server.mappath("database/20020122.mdb")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};"
     set conn=server.createobject("ADODB.CONNECTION")
     conn.open connstr 
set rs=server.createobject("adodb.recordset")
sql="select * from admin where username='"&username&"'"
rs.open sql,conn,1,1
if not rs.eof then
 if password=rs("password") then
   response.cookies("okadmin")=true
   response.redirect "manage.asp"
 else
 response.redirect "login.asp?err=3"
 end if
else
 response.redirect "login.asp?err=4"
end if
rs.close
conn.close
set rs=nothing
set conn=nothing

%>