set rs=server.createobject("adodb.recordset")
sql="select * from admin where username='"&username&"'"
rs.open sql,conn,1,1
if not rs.eof then
if password=rs("password") then
response.cookies("adminok")=true
response.redirect "manage.asp"
else
response.redirect "login.asp"
end if
else
response.redirect "login.asp"
end if