<!--#include file="conn.asp"-->
<%
dim rs
dim sql
userid=replace(trim(request("userid")), "'", "''")
password=replace(trim(Request("password")), "'", "''")
sql="select * from users where userid='"&userid&"'and password='"&password&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,1,3
if rs.bof and rs.eof then
	response.write"<script>alert('用戶名或密碼錯誤，不接受！');history.back();</Script>"
  response.end
end if
Dim userip 
userip=Request.ServerVariables("REMOTE_ADDR")'取得提交登陸信息用戶的IP
response.cookies("userid")=rs("userid")
response.cookies("password")=rs("password")
response.cookies("userip")=userip
rs.close
set rs=nothing
conn.close
set conn=nothing
response.redirect Request.ServerVariables("HTTP_REFERER")
 %>