<!--#include file="conn_user.asp"-->
<table width="398" border="0" align="center" cellpadding="3" cellspacing="0">
    <tr align="center" bgcolor="#006699">
      <td height="20" colspan="2"><font color="#FFFFFF">用&nbsp; 戶&nbsp; 登&nbsp; 陸</font></td>
    </tr>
    <tr>
      <td width="143" align="right">姓名:</td>
      <td width="241"><input name="name" class="goto"  size="20" type="text" id="name"></td>
    </tr>
    <tr>
      <td align="right">密碼:</td>
      <td><input name="password" type="password" size="22" class="goto"  id="password"></td>
    </tr>
    <tr align="center">
      <td colspan="2"><input type="submit"  class="goto"  name="Submit" value="提交">
&nbsp;&nbsp;
      <input type="reset" name="Submit2" class="goto"  value="重置"></td>
    </tr>
  </table>
  
<%
name=replace(trim(request.form("name")),"'","''") 
pass=replace(trim(request.form("password")),"'","''") 
sql="select * from reg where name='"&name& "'and password='"&pass&"'"
set rs=db.execute(sql)
  if not rs.eof or not rs.bof then
  session("name")=name
  response.redirect "login_ok.asp"
  else
  response.redirect "error.asp?id=3"
  end if
%>