check.asp

我的课程设计

<% response.buffer=true%>
<!-- #include file="conn.asp" -->
<%
 
    Dim cn,userright,strSQL,rs,password
    If Request("userright")="user" then
   	 cn=request.Form("user")
	 password=request.form("password")
	 set rs=server.createobject("adodb.recordset")
     strSQL="select * from  borrowers where cardno='"&cn&"'"
     rs.open strSQL,db,1,1
     if not rs.eof then
     if  rs("psw")=password and rs("cardno")=cn then
	 session("username")=rs("name")
	 session("cardnumber")=request.Form("user")
	 response.Redirect("default.asp")
	  else 
	      response.Redirect("index.asp")	  
	  end if
	  end if  
      end if
	   
	  If Request("userright")="admin" then 
	  usern=request.Form("user")
	  password=request.form("password")
	  set rs1=server.createobject("adodb.recordset")
      strSQL1="select * from  admin where admin='"&usern&"'"
      rs1.open strSQL1,db,1,1
	  if not rs1.eof then
      if  rs1("psw")=password and rs1("admin")=usern then
	  session("username")=rs1("admin")
	  response.Redirect("admin_default.asp")
	  else 
	      response.Redirect("index.asp")	  
	   end if
	   end if  
	   end if
	   
%>