log.asp

网站源代码

<!--#include file=conn.asp -->
<%
dim user,password
user=request("user")
password=request("password")
set rs=conn.execute("select * from admin where user='"&user&"' and  password='"&password&"'and (spend = 1 )")
if not rs.eof then
session("admin")=rs("user")
session("flag")=rs("flag")
response.Redirect("admin/main.asp")
else
response.Redirect("login.asp")
end if
rs.close
set rs=nothing
%>