<!--#include file=conn.asp--><!--#include file=md5.asp-->
<%
dim name,password,rs,sql
name=replace(request.form("name"),"'","")
password=replace(request.form("password"),"'","")
password=md5(password)
set rs=server.createobject("adodb.recordset")
sql="select * from [admin] where name='"&name&"' and pwd='"&password&"'"
rs.open sql,conn,1,1
if not rs.bof and not rs.eof then
    if password=rs("pwd") then
       response.cookies("xxadmin")("administrator")=rs("name")
	    session("administrator")=rs("name")
       response.cookies("xxadmin")("ijob")=1
       session("admin_ijob")=now()
       response.cookies("xxadmin")("domain")=request.ServerVariables("server_name")
       response.redirect"index1.asp"
    else
       response.write"<script language=javascript>alert('用戶名或密碼錯誤！')</script>"
       response.redirect "login.asp"
       response.end
    end if
else
    response.write"<script language=javascript>alert('身份確認失敗！');location.href='index.asp';</script>"
    response.end
end if
rs.close
set rs=nothing
conn.close
set conn=nothing
%>