<% dim conn,rs dim connstr,sqlrs dim password,psw psw=replace(request("psw"),"'","") if psw<>"" then db="inc/data.asa" on error resume next connstr="DBQ="+server.mappath(""&db&"")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};" set conn=server.createobject("ADODB.CONNECTION") if err then err.clear else conn.open connstr end if set rs=server.CreateObject("adodb.recordset") sqlrs="select * from admin" rs.open sqlrs,conn,1,1 if not rs.eof then password=rs("password") rs.close:conn.close set rs=nothing:set conn=nothing if cstr(password)=cstr(psw) then session("pwd")=password session("pwd-2")=psw response.Redirect("info-show.asp") else response.Redirect("login.asp?msg=error! Please again ...") end if else %> login
<%=request("msg")%>
passWord:
edit
<%end if%>