<!--#include file="../function/connect.asp"-->
<!--#include file="../function/function.asp"-->
<%
	if request("Submit")<>"" then
		user_name=getString(request("user_name"))
		user_password=request("user_password")
		strsql="select user_name,user_password from users where user_name='" & user_name & "' "
		Set objRs = Server.CreateObject("adodb.recordset")
	    	objRs.Open strsql,objConn,1,1
	    	if not objRs.eof then
	    		if objRs.fields("user_password") & "" = user_password then
	    			session("loginuser")=user_name
	    			response.redirect "../main.asp"
	    		else
	    			response.write "<script>alert('密碼錯誤.');history.back();</script>"
	    			response.end
	    		end if
	    	else
	    		response.write "<script>alert('此用戶不存在.');history.back();</script>"
	    		response.end
	    	end if
	end if
%>