<%
  Response.Buffer = true
  Response.Expires = 0
  Response.CacheControl = "no-cache"
  UserName = Request.Cookies("" & DomainName & "")("UserName")
  PassWord = Request.Cookies("" & DomainName & "")("PassWord")
  FileName = Request.ServerVariables("script_name")
  Postion = InstrRev(fileName, "/") + 1
  FileName = Mid(FileName, Postion)
  If UserName = "" or PassWord = "" Then
     Conn.Close
     Response.Redirect "login.asp?FileName=" & FileName & ""
     Response.End
  End if
  rs.Open "Select * From member Where UserName = '" & UserName & "'",Conn
  If rs.Eof Then
     rs.Close
     Conn.Close
     Session ("Message") = "您輸入的用戶名并不存在，請<a href='signup.asp'>注冊</a> 。"
     Response.Redirect "error.asp"
     Response.End
  End if
  rs.Close
  rs.Open "Select * From member Where UserName = '" & UserName & "' And PW = '" & PassWord & "'",Conn
  If rs.EOF Then
     rs.Close
     Conn.Close
     Session ("Message") = "密碼錯誤。"
     Response.Redirect "error.asp"
     Response.End
  End If
  rs.Close
%>