<!--#include file="conn.asp"-->
<!--#include file="error.asp"--> 
<!--#include file="md5.asp"-->
<title><%=sitename%></title>
<%
  dim user,password
  user=lcase(trim(request.form("user")))
  password=request.form("password")
  if user="" then
      founderr=true
      errinfo="<li>請(qǐng)輸入帳號(hào)<br>"
  else
      set rs=conn.execute("select id from user where user='"&user&"'")
      if rs.eof and rs.bof then
          founderr=true
          errinfo="<li>你輸入的帳號(hào)有誤<br>"
      end if
      set rs=nothing
  end if
  if password="" then
      founderr=true
      errinfo=errinfo&"<li>請(qǐng)輸入密碼<br>"
  else
      set rs=conn.execute("select id from user where password='"&md5(password)&"'")
      if rs.eof and rs.bof then
          founderr=true
          errinfo=errinfo&"<li>你輸入的密碼有誤<br>"
      end if
      set rs=nothing
  end if
  if founderr=true then
      call errweb()
  else
      session("member_address_list")=user
      conn.execute("update user set logindate=now() where user='"&user&"'")
      response.redirect"main.asp"
  end if

  conn.close
  set conn=nothing
%>