<!--#include file="conn.asp" -->
<%
uname=request.Form("uname")
psd=request.Form("psd")

exec="select * from user where(uname='"+uname+"' and '"+psd+"')"
set rs=server.CreateObject("adodb.Recordset")
rs.open exec,conn,1,1
%>

<%
if rs("uname")=request.Form("uname")and rs("psd")=request.Form("psd") then
session("uname")=request.Form("uname")
session("checked")=2
Response.Redirect("user_index.asp")
else
Response.Redirect("../login.asp")
end if
%>