dim admin_name,admin_pass
admin_name=request.form("username")
admin_pass=request.form("password")
admin_pass=md5(admin_pass)
%>
<%
if admin_name<>"" and admin_pass<>"" then
sql="select * from admin order by ID desc"
Set ra = Server.CreateObject("ADODB.Recordset")
ra.open sql,conn,1,3
if not ra.eof then
if ra("username")=admin_name and ra("password")=admin_pass then
session("admin_name")=admin_name
session("admin_pass")=admin_pass
response.Redirect ("admin_index.asp")
ra.close
else
response.write("<script>alert('非法登陆!');history.go(-1)</script>")
end if
end if
else
end if
%>