<!--#include file="config.asp" -->
<!--#include file="inc/md5.asp"-->


<% UserName=Checkstr(request.form("UserName"))
   PassWord=md5(Checkstr(Trim(Request.Form("PassWord"))))
   if UserName="" or PassWord="" then
response.write"<script language='javascript'>"&chr(13)&"alert('用戶名或密碼任何一個都不可以為空！');"&chr(13)&"window.document.location.href='javascript:history.back()';"&chr(13)&"</script>"
response.end
end if
   
   
	   set rs=server.createobject("adodb.recordset")
	   
   sql="select UserName,PassWord from Admin_UserInfo where UserName='" & UserName & "'  and isActive=-1 and CategoryName='"&CategoryName&"'"
      rs.open sql,conn,1,1

if rs.eof then
rs.close
response.write"<script language='javascript'>"&chr(13)&"alert('用戶名錯誤，請重新登錄！');"&"history.back()"&"</script>"
response.end
end if

if rs("PassWord")<>PassWord then
rs.close
response.write"<script language='javascript'>"&chr(13)&"alert('密碼錯誤，請重新登錄！');"&"history.back()"&"</script>"
response.end
end if

			  session("sUserName")=rs("UserName")
			  session("sPassWord")=rs("PassWord")
			
	  rs.close
	  set rs=nothing
	response.Redirect""&request.ServerVariables("HTTP_REFERER")
	  %>