<!-- #include file="conn.asp" -->
<!-- #include file="inc/md5.asp" -->
<%
nowusername=request.form("username")
nowpassword=request.form("password")
sql="select * from login where username='"&nowusername&"' and password='"&md5(nowpassword)&"'"
set rs=conn.execute(sql)
if rs.eof then
%>
<script language=javascript>
alert('用戶名稱或口令錯誤！')
window.history.go(-1)
</script>
<%
  response.end
end if
session("username")=nowusername
response.redirect "main.asp"
%>