<%@ language=vbscript %>
<!-- #include file=DATABASE.INC -->
<%
user=Request("idname2")
user=Replace(user,"'","")
user=Replace(user,"<","")
user=Replace(user,">","")
if user="" then
Response.Redirect("mlogin.asp?err_nub=1")
end if
password=Request("password2")
if password="" then 
Response.Redirect("mlogin.asp?err_nub=2")
end if
Set rs = Server.CreateObject("ADODB.Recordset")
sql="select * from 56mdata where username='"&user&"'"
rs.Open sql,cn,3,2,adcmdtest
if Not rs.Eof then 
if rs("psw")=password then
session("56mname")=user
session("56mnameture")=password
rs.close
cn.close
set rs=nothing:set cn=nothing
Response.Redirect("mmain.asp")
else
Response.Redirect("mlogin.asp?err_nub=3")
end if
else
rs.close
cn.close
set rs=nothing:set cn=nothing
Response.Redirect("mlogin.asp?err_nub=3")
end if

%>