<!--#include file="conn.asp"-->
<!--#include file="md5.asp"-->
<%
username=trim(Request.form("username"))
password=trim(Request.form("password"))

if username="" or password="" then 
	Response.Redirect ("adminlogin.asp")
end if
password=md5(trim(CheckStr(password)),16)
OpenDB()
set rs=server.createobject("adodb.recordset")
sql="select * from admin_table where user='"&username&"'" 
rs.open sql,conn,1,3
if password<>rs("password")  then
Response.Write "請輸入正確的管理員名字和密碼！<a href='javascript:history.back(-1)'>返回</a>"
	Response.End 

else
	conn.Execute("update admin_table set Logincount=Logincount+1,LoginTime='"&now()&"',LoginIP='" & Request.ServerVariables("REMOTE_ADDR") & "' where user='"&username&"'and password='"&password&"'")
	Session("Admin")=rs("user")
	Session("IsAdmin")=true
	Session("level")=rs("levels")
    Session.timeout=900
response.cookies("username")=RS("user")
response.cookies("password")=rs("password")
	Response.Redirect ("admin.asp")	
end if
rs.close
set rs=nothing
CloseDB()
%>