<!--#include file="db.asp"-->
<%
userid=request("userid")
pwd=request("pwd")
kind=request("kind")
sql="select * from User_info where userid="&userid&" and pwd='"&pwd&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,3,2
if rs.eof then
  response.redirect "login.asp?Message=error"
else
  userid=rs("userid")
  username=rs("username")
  powerid=rs("powerid")
  rs.close  
end if
if kind="A"  then
  tempstr=instr(powerid,"A")
    if tempstr<>0 then
    Response.Cookies("logok")="yes"
    Response.Cookies("userid")=userid
    Response.Cookies("username")=username
    Response.Cookies("pwd")=pwd
    Response.Cookies("powerid")=powerid
    response.redirect "default.asp"
    else
    response.redirect "login.asp?Message=nota"
    end if   
else
    Response.Cookies("logok")="yes"
    Response.Cookies("userid")=userid
    Response.Cookies("username")=username
    Response.Cookies("pwd")=pwd
    response.redirect "default.asp"
end if
%>