<!--#include file="conn.asp"-->

<%
dim admin_name,admin_pwd
admin_name=trim(request("name"))
admin_pwd=trim(request("pwd"))

if admin_name="" or admin_pwd="" then
response.write "<script>alert('對不起，用戶名和密碼不能為空！');document.location.href='admin_index.asp';</script>"
response.end
end if

set rs=server.createobject("adodb.recordset")
sql="select * from admin where admin_name='"&admin_name&"'"
rs.open sql,conn,1,1

%>
<%
if not rs.eof then
	if rs("admin_pwd")<>admin_pwd then
		response.write "<script>alert('對不起，密碼不正確，請重新輸入');document.location.href='admin_index.asp';</script>"
		response.end
	else
		session("user")=admin_name
		response.redirect "info_manager.asp"
	end if
else
	response.write "<script>alert('對不起，你的用戶名不存在，請與管理員聯系！');document.location.href='admin_index.asp';</script>"
	response.end
end if
		
%>