<!--#include file="const.asp"-->

<!--#include file="conn.asp"-->
<%set rs=server.createobject("adodb.recordset")
sql="select * from admin where admin='"&request("admin")&"' and pwd='"&request("pwd")&"'"
rs.open sql,conn,3,1
if rs.eof then
response.write "<script>alert('用戶名不存在或者密碼錯誤！');</script>"
response.write "<script>history.back(1);</script>"
else
response.cookies("admin")=rs("admin")
response.cookies("qx")=rs("qx")
response.write "<script>location.href='step1.asp';</script>"
end if
rs.close
set rs=nothing
conn.close
set conn=nothing
%>