<%
session.timeout=1000
if request("用户名")<>"" and request("密码")<>"" then
strUserId = Request("用户名")
strPassword = Request("密码")
Set rs = Server.CreateObject("ADODB.Recordset")
strSql = "SELECT * FROM 管理员 where 用户名='" + strUserId + "' and 密码='"+strPassword+"'"
rs.open strsql,conn,1,1
if rs.recordcount>0 then
session("username")=strUserId
response.Redirect("system.asp")
else
response.Write "<script language=javascript>alert('非法操作者');</script>"
end if
rs.close
end if
%>