<%response.expires=0%>
<!--#include file="conn.asp"-->
			<%
			flag=request.querystring("flag")
			username=Replace(trim(request.form("T2")),"'","")
			mm=Replace(trim(request.form("T1")),"'","")
			if username="" or mm="" then
				session("yhm")=""
				conn.close
				response.write("<p align='center'><font color='#ff0000' size=+1>用戶名和密碼不能為空！</font></p>")
			else
				sql="select id,yhm from userinfo where yhm='"&username&"'"
				set rs=conn.execute(sql)
				if rs.eof or rs.bof then
					session("yhm")=""
					session("id")=""
					rs.close
					conn.close
					response.write("<p align='center'><font color='#ff0000' size=+1>對不起，該用戶不存在！</font></p>")
				else
					sql="select id,yhm from userinfo where yhm='"&username&"' and mm='"&mm&"'"
					set rs=conn.execute(sql)
					if rs.eof or rs.bof then
						session("yhm")=""
						session("id")=""
						rs.close
						conn.close
						response.write("<p align='center'><font color='#ff0000' size=+1>對不起，密碼錯誤！</font></p>")
					else
						session("yhm")=rs("yhm")
						session("id")=rs("id")
						response.write("<script language='javascript'>")
						if flag="0" then
	response.write("location.href='xgzl.asp?id="&rs("id")&"';")
else
	response.write("location.href='../main_zlgl.htm';")
end if
response.write("</script>")
						rs.close
						conn.close
					end if
				end if
			end if
			%>