<!--#include file="conn.asp"-->
<%
username=trim(request.Form("name"))
pass=trim(request.form("password"))
sql="select * from user where username='"&username& "'"
rs.open sql,conn,1,1

sql1="select * from admin where username='"&username& "'"

rs1.open sql1,conn,1,1
if not rs1.eof then
	if rs1 ("password")=pass then
		session("admin")=rs1("username")
		session("adminame")=rs1("name")
		response.redirect "admin.asp"
	else
		response.write "<SCRIPT language=JavaScript>alert('密碼錯誤');this.location.href='vbscript:history.back()';</SCRIPT>"
	end if
end if
if not rs.eof then
	if rs("password")=pass then
  		session("username")=rs("username")
		session("name")=rs("name")
		response.redirect "login_ok.asp"
	else
		response.write "<SCRIPT language=JavaScript>alert('密碼錯誤');this.location.href='vbscript:history.back()';</SCRIPT>"
	end if
end if
response.write "<SCRIPT language=JavaScript>alert('沒有這個用戶');this.location.href='vbscript:history.back()';</SCRIPT>"
  
%>