%
'****************************************************************
'** 版权所有:烈火工作室 演示网站http://www.strongfire.cn **
'** QQ:839225572 邮箱:strongfire2008@163.com **
'** 非正版用户不得擅自非法修改用于商业用途!查出必究。 **
'****************************************************************
%>
<%
SecurityCode=Trim(request.Form("SecurityCode"))
if SecurityCode <> cstr(session("lhSecurityCode")) then
response.write""
response.end
end if
user=trim(Request.Form("user"))
password=md5(trim(Request.Form("password")))
user=replace(user,"'","''")
password=replace(password,"'","''")
set rs=server.CreateObject ("ADODB.RecordSet")
sql="select * from Admin where user='" & user & "'and password='" & password & "'"
rs.Open sql,conn,1,1
if rs.eof and rs.bof then
rs.close
set rs=nothing
conn.close
set conn=nothing
response.write""
response.end
else
rs.close
set rs=nothing
conn.close
set conn=nothing
session("admin")=user
response.Redirect "index.asp"
end if
%>